CVE-2020-27697: High severity trend micro antivirus+ security 2020 vulnerability
Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink attack) which can lead to obtaining administrative privileges during the installation of the product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27697?
CVE-2020-27697 has been rated as a high severity vulnerability due to the potential for administrative privilege escalation.
How do I fix CVE-2020-27697?
To fix CVE-2020-27697, ensure that you apply the latest patches and updates provided by Trend Micro for the affected products.
What products are affected by CVE-2020-27697?
CVE-2020-27697 affects Trend Micro Antivirus+ Security 2020, Trend Micro Internet Security 2020, Trend Micro Maximum Security 2020, and Trend Micro Premium Security 2020.
What kind of attack does CVE-2020-27697 enable?
CVE-2020-27697 enables a symlink attack that can be exploited by placing a malicious DLL in a high-privilege non-protected location.
What are the potential consequences of exploiting CVE-2020-27697?
Exploiting CVE-2020-27697 can lead to unauthorized administrative access during the installation process, compromising system security.