CVE-2020-27013

published 2020-10-14

CVE-2020-27013: Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with…

Priority P4 18 medium 4.4 CVSS 3.1

AV L AC L PR L UI N S U C L I L A N

Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
trend_micro	trend_micro_antivirus_for_mac	—	—
trendmicro	antivirus	—	—

CVSS provenance

nvd v3.1 4.4 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

nvd v2.0 3.6 LOW AV:L/AC:L/Au:N/C:P/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.