« Volver al listado

CVE-2020-9320

Estado: ModificadaMedia (5.5)—

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (8)

Avira — Anti-malware SDKAvira — Antivirus ServerAvira — Avira Antivirus FOR EndpointAvira — Avira Antivirus FOR Small BusinessAvira — Avira Exchange SecurityAvira — Avira Free Security SuiteAvira — Avira Internet Security SuiteAvira — Avira Prime

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-9320",
  "cveTags": [
    {
      "tags": [
        "disputed"
      ],
      "sourceIdentifier": "cve@mitre.org"
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-02-20T22:15:12.257",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2020/Feb/31",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.zoller.lu/%5BTZO-01-2020%5D%20AVIRA%20Generic%20Bypass%20ISO.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2020/Feb/31",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.zoller.lu/%5BTZO-01-2020%5D%20AVIRA%20Generic%20Bypass%20ISO.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product"
    },
    {
      "lang": "es",
      "value": "** EN DISPUTA ** Avira AV Engine versiones anteriores a 8.3.54.138, permite omitir la detección de virus por medio de un archivo ISO diseñado. Esto afecta a las versiones anteriores a 8.3.54.138 de Antivirus para Endpoint, Antivirus para Small Business, Exchange Security (Gateway), Internet Security Suite para Windows, Prime, Free Security Suite para Windows y Cross Platparam Anti-malware SDK. NOTA: El vendedor afirma que la vulnerabilidad no existe en el producto"
    }
  ],
  "lastModified": "2026-06-17T03:27:44.910",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avira:anti-malware_sdk:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B72788C-6ACD-482D-87D3-C334D8A16439",
              "versionEndExcluding": "8.3.54.138"
            },
            {
              "criteria": "cpe:2.3:a:avira:antivirus_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30F53D27-BB74-4081-ADCD-40E3BCF4CF61",
              "versionEndExcluding": "8.3.54.138"
            },
            {
              "criteria": "cpe:2.3:a:avira:avira_antivirus_for_endpoint:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82507BF4-1F45-42B6-85A0-85F3F8D67C82",
              "versionEndExcluding": "8.3.54.138"
            },
            {
              "criteria": "cpe:2.3:a:avira:avira_antivirus_for_small_business:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B79CE7D-B721-4020-B203-A41F8756E818",
              "versionEndExcluding": "8.3.54.138"
            },
            {
              "criteria": "cpe:2.3:a:avira:avira_exchange_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F86DF45-AAF9-456A-8E99-7B79790BC859",
              "versionEndExcluding": "8.3.54.138"
            },
            {
              "criteria": "cpe:2.3:a:avira:avira_free_security_suite:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A136E43F-2878-49EC-9F72-97DD4F9DF509",
              "versionEndExcluding": "8.3.54.138"
            },
            {
              "criteria": "cpe:2.3:a:avira:avira_internet_security_suite:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E2E63E2-1AC6-463A-B20E-C73B51F1C3EF",
              "versionEndExcluding": "8.3.54.138"
            },
            {
              "criteria": "cpe:2.3:a:avira:avira_prime:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10E837C1-A5D3-48CC-8E0E-AE4D99AD7CFA",
              "versionEndExcluding": "8.3.54.138"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}