CVE-2020-10193
published 2020-03-06CVE-2020-10193: ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294…
PriorityP338high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
1.35%
68.2th percentile
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| eset | cyber_security | < 1294 | 1294 |
| eset | internet_security | < 1294 | 1294 |
| eset | mobile_security | < 1294 | 1294 |
| eset | mobile_security | — | — |
| eset | nod32_antivirus | < 4 | 4 |
| eset | nod32_antivirus | < 1294 | 1294 |
| eset | smart_security | < 1294 | 1294 |
| eset | smart_tv_security | < 1294 | 1294 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_oracle7.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fr38-j2q5-r3j5: ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive
ghsa_unreviewed·2022-05-24
CVE-2020-10193 [MEDIUM] CWE-20 GHSA-fr38-j2q5-r3j5: ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
Oracle
Oracle Oracle Communications Applications Risk Matrix: FDP, VSP Login, Packet Inspector (Redis) — CVE-2019-10193
vendor_oracle·2020-07-15·CVSS 7.2
CVE-2019-10193 [HIGH] Oracle Oracle Communications Applications Risk Matrix: FDP, VSP Login, Packet Inspector (Redis) — CVE-2019-10193
Oracle Oracle Communications Applications Risk Matrix: FDP, VSP Login, Packet Inspector (Redis) vulnerability
CVE: CVE-2019-10193
CVSS: 7.2
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpujul2020 (JUL 2020)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-03-06
Published