PT-2021-3453 · Trend Micro · Trend Micro Home Network Security

Carl Hurd + 1 · Published 2021-05-05 · Updated 2021-05-11 · CVE-2021-31518

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Home Network Security versions 6.5.599 and earlier

Description The issue is related to a file-parsing vulnerability that could allow a remote attacker to cause a denial-of-service to the device. This vulnerability is similar to other known issues but has distinct characteristics. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For Trend Micro Home Network Security versions 6.5.599 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2021-03313

CVE-2021-31518

Affected Products

Trend Micro Home Network Security

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-31518 · Security Note
• https://bdu.fstec.ru/vul/2021-03313 · Security Note
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10312 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-31518 · Vendor Advisory
• https://t.me/cvenotify/14093 · Telegram Post
• https://vuldb.com/?id.174480 · Note
• https://t.me/cvenotify/14095 · Telegram Post