CVE-2020-7213

CVE-2020-7213 describes a high-severity vulnerability in Parallels 13 where its update process uses cleartext HTTP, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could intercept the unencrypted communication for parallels_updates.xml from http://update.parallels.com, potentially injecting malicious updates. The CVSS score of 7.5 highlights the high impact on confidentiality, integrity, and availability, with a high attack complexity requiring user interaction. Despite its severity, there is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.