« Volver al listado

CVE-2020-27696

Estado: ModificadaAlta (7.8)—

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining administrative privileges during the installation of the product.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Trendmicro — Antivirus+ Security 2020Trendmicro — Internet Security 2020Trendmicro — Maximum Security 2020Trendmicro — Premium Security 2020

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-27696",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@trendmicro.com",
      "affectedData": [
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Security (Consumer)",
          "versions": [
            {
              "status": "affected",
              "version": "2020 (v16)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-11-18T19:15:11.350",
  "references": [
    {
      "url": "https://helpcenter.trendmicro.com/en-us/article/TMKA-10036",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://helpcenter.trendmicro.com/en-us/article/TMKA-10036",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining administrative privileges during the installation of the product."
    },
    {
      "lang": "es",
      "value": "Trend Micro Security 2020 (Consumer) contiene una vulnerabilidad en el paquete de instalación que podría ser explotada al colocar un directorio de sistema de Windows específico que puede conllevar a una obtención de privilegios administrativos durante la instalación del producto"
    }
  ],
  "lastModified": "2026-06-17T03:09:30.283",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trendmicro:antivirus\\+_security_2020:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C00561E3-418B-4FCD-B1F4-E2ABBB283D82",
              "versionEndIncluding": "16.0"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:internet_security_2020:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D2DD545-14EE-4244-9941-DE9423BAEFE1",
              "versionEndIncluding": "16.0"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:maximum_security_2020:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DD354AF-05D4-434F-9195-D4029AC65001",
              "versionEndIncluding": "16.0"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:premium_security_2020:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B92B18B-6DF1-4924-804C-96ABCBEFBE65",
              "versionEndIncluding": "16.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@trendmicro.com"
}