CVE-2019-3942

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password...

Code injection

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine...

Privilege escalation

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Local Privilege Escalation LPE via RPC...

Default credentials

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password...

Code injection

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a reboot via RPC from a Low Integrity process...

Arbitrary file deletion

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled...

CVE-2020-10868

Avast Antivirus (before 20) is affected via the aswTask RPC endpoint in the TaskEx library of the Avast Service (AvastSvc.exe). The issue allows a Low Integrity process to launch the Repair App RPC call, indicating a security boundary bypass within the AvastSvc.exe RPC surface. Connected sources ...

CVE-2020-10866

CVE-2020-10866 affects Avast Antivirus before version 20. The vulnerability stems from the aswTask RPC endpoint in the TaskEx library used by AvastSvc.exe, which allows a Low Integrity process to enumerate network interfaces and access points via RPC. This exposes potential exposure of network to...

CVE-2020-10865

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to make arbitrary changes to the Components section of the Stats.ini file via RPC from a Low Integrity process...

CVE-2020-10865

The CVE affects Avast Antivirus before version 20. The aswTask RPC endpoint used by the TaskEx library in AvastSvc.exe allows a Low Integrity process to make arbitrary changes to the Components section of Stats.ini via RPC. This is the concrete vulnerability described in CVE-2020-10865. The avail...

CVE-2020-10864

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a reboot via RPC from a Low Integrity process...

CVE-2020-10864

CVE-2020-10864 affects Avast Antivirus before 20. The aswTask RPC endpoint in the TaskEx library used by AvastSvc.exe can be triggered via RPC from a Low Integrity process to reboot the system. Multiple connected sources (NVD, Red Hat, CNVD, CVE listings) confirm the same description. No remediat...

CVE-2020-10863

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine...

CVE-2020-10863

CVE-2020-10863 affects Avast Antivirus before version 20. The aswTask RPC endpoint of the TaskEx library in AvastSvc.exe can be invoked from a Low Integrity process to trigger a shutdown via TempShutDownMachine. Documents from multiple sources corroborate this denial-of-service-style impact (shut...

CVE-2020-10862

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Local Privilege Escalation LPE via RPC...

CVE-2020-10862

Summary (CVE-2020-10862) Avast Antivirus prior to version 20 contains a Local Privilege Escalation (LPE) flaw. The issue lies in the aswTask RPC endpoint used by the TaskEx library within AvastSvc.exe, which attackers can abuse via RPC to gain higher privileges on the affected host. The available...

CVE-2020-10861

Avast Antivirus prior to version 20 contains a vulnerability in the aswTask RPC endpoint used by the TaskEx library within AvastSvc.exe. The endpoint allows arbitrary file deletion from the Avast Program Path via RPC when Self Defense is enabled. The issue is described consistently across multipl...

CVE-2020-10861

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled...

CVE-2019-3942

Affected product : Advantech WebAccess 8.3.4. Vulnerability : An access-control error in a remote procedure call (RPC) allows unauthenticated, remote users to read files. Root cause: insufficient restriction on RPC calls leading to exposure of sensitive files; attacker could recover the administr...

xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response

A flaw was discovered where the XMLRPC client implementation in Apache XMLRPC, performed deserialization of the server-side exception serialized in the faultCause attribute of XMLRPC error response messages. A malicious or compromised XMLRPC server could possibly use this flaw to execute arbitrar...