CVE-2020-27697 Privilege escalation in Trend Micro Security (Consumer)
Attackers can gain administrative privileges during installation by placing a malicious DLL in a non-protected location via a symlink attack.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-27697?
CVE-2020-27697 is a high-severity vulnerability in Trend Micro Security (Consumer), published on 18 Nov 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink attack) which can lead to obtaining administrative privileges during the installation of the product.
Weakness: CWE-59
Which versions are affected by CVE-2020-27697?
It affects 4 products.
Products include Trendmicro Antivirus\+ Security 2020, Trendmicro Internet Security 2020, Trendmicro Maximum Security 2020, Trendmicro Premium Security 2020.
How do I fix CVE-2020-27697?
No fix has been published for CVE-2020-27697 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-27697 being exploited?
There is no known exploitation of CVE-2020-27697 in the wild and no public exploit code.
Other vulnerabilities in Trend Micro Security (Consumer)
- CVE-2019-18190 Null dereference in Trend Micro Security (Consumer)
- CVE-2020-27695 Privilege escalation in Trend Micro Security (Consumer)
- CVE-2020-27696 Privilege escalation in Trend Micro Security (Consumer)
- CVE-2021-25251 Code injection in Trend Micro Security (Consumer)
- CVE-2019-19693 Path traversal in Trend Micro Security (Consumer)
Sources
Also known as GHSA-9hh8-9m39-758p.