CVE-2024-13188 MicroWorld eScan Antivirus Installation var default permission

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...

CVE-2024-13188 MicroWorld eScan Antivirus Installation var default permission

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...

CVE-2024-13188

CVE-2024-13188 affects MicroWorld eScan Antivirus 7.0.32 on Linux. The vulnerability stems from incorrect default permissions in the Installation Handler’s /opt/MicroWorld/var/ directory, enabling local access to manipulate permissions. Exploitation has been publicly disclosed. Remediation detail...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

CVE-2024-42919 affects MicroWorld eScan Management Console 14.0.1400.2281, with a vulnerability described as Incorrect Access Control via the acteScanAVReport function. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no user interaction, and total impact to confidentiality, integ...

MicroWorld eScan Management Console 安全漏洞

MicroWorld eScan Management Console is an eScan management console from MicroWorld, Inc. A security vulnerability exists in MicroWorld eScan Management Console version 14.0.1400.2281 that stems from susceptibility to incorrect access control via acteScanAVReport...

CVE-2024-28519

A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privilege escalation for low-privileged users...

CVE-2024-28519

A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privilege escalation for low-privileged users...

CVE-2024-28519

CVE-2024-28519 affects MicroWorld Technologies Inc eScan Antivirus v4.0.0.49. The issue is a kernel handle leak in ProcObsrvesx.sys that could allow privilege escalation for low-privileged users. CVSSv3.1 base score is 7.8 ( HIGH; LOCAL exploit, low complexity, no user interaction; confidentialit...

eScan Antivirus 安全漏洞

eScan Antivirus is a network anti-virus security software from eScan. A security vulnerability exists in eScan Antivirus version 4.0.0.49, which stems from a leaky kernel handle issue that could allow privilege escalation by a low-privileged user...

PT-2024-22450 · Microworld Technologies · Escan Antivirus

Name of the Vulnerable Software and Affected Versions: MicroWorld Technologies Inc eScan Antivirus version 4.0.0.49 Description: A kernel handle leak issue in ProcObsrvesx.sys could allow privilege escalation for low-privileged users. Recommendations: For version 4.0.0.49, consider updating to a...

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

A new malware campaign has been exploiting the updating mechanism of the eScan antivirus software to distribute backdoors and cryptocurrency miners like XMRig through a long-standing threat codenamed GuptiMiner targeting large corporate networks. Cybersecurity firm Avast said the activity is the...

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

...

CVE-2023-47233

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to...

UBUNTU-CVE-2023-47233

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to...

CVE-2023-47233

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to...

CVE-2023-4383

A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affects an unknown part of the file runasroot. The manipulation leads to incorrect execution-assigned permissions. The attack needs to be approached locally. The exploit has been...