Lucene search

K
nvd[email protected]NVD:CVE-2024-25091
HistoryMar 01, 2024 - 9:15 a.m.

CVE-2024-25091

2024-03-0109:15:09
CWE-693
web.nvd.nist.gov
5
cve-2024-25091
revoworks scvx
revoworks browser
protection mechanism failure
viruschecker
threatchecker
sandbox evasion
malware.

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

9.0%

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using ‘VirusChecker’ or ‘ThreatChecker’ feature) and RevoWorks Browser prior to 2.2.95 (when using ‘VirusChecker’ or ‘ThreatChecker’ feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-25091