PT-2021-5675 · Trend Micro · Trend Micro Antivirus For Mac

R3Ggi + 1 · Published 2021-07-15 · Updated 2022-07-12 · CVE-2021-43771

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2021 version 11

Description The issue is related to improper access control, which could allow an attacker to establish a connection leading to full local privilege escalation within the application. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system.

Recommendations For Trend Micro Antivirus for Mac 2021 version 11, update to a version that includes a fix for the improper access control privilege escalation issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2022-00114

CVE-2021-43771

ZDI-21-1320

Affected Products

Trend Micro Antivirus For Mac

References · 8

• https://zerodayinitiative.com/advisories/ZDI-21-1320 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-43771 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43771 · Vendor Advisory
• https://helpcenter.trendmicro.com/en-us/article/TMKA-10832 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00114 · Security Note
• https://cybersecurity-help.cz/vdb/SB2021111705 · Note
• https://helpcenter.trendmicro.com/en-us/article/tmka-10832 · Note
• https://t.me/cvenotify/23977 · Telegram Post