CVE-2020-9320

· MEDIUMModified

← All CVEs

CVSS v3.1

5.5

EPSS

2.88%

Published

Feb 20, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-434

Affected Products (8)

avira · anti-malware_sdk (up to 8.3.54.138)vulnerable

avira · antivirus_server (up to 8.3.54.138)vulnerable

avira · avira_antivirus_for_endpoint (up to 8.3.54.138)vulnerable

avira · avira_antivirus_for_small_business (up to 8.3.54.138)vulnerable

avira · avira_exchange_security (up to 8.3.54.138)vulnerable

avira · avira_free_security_suite (up to 8.3.54.138)vulnerable

avira · avira_internet_security_suite (up to 8.3.54.138)vulnerable