Skip to content
OpenAdvisories

Vendor

MicroWorld

8 known vulnerabilities.

Products

eScan Antivirus 4 eScan Anti-Virus 1 eScan Anti-Virus for Linux 1 eScan Web Management Console 1 eScan AV 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-13990

    MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates

    MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle (MitM) att…

    MicroWorld eScan AV
  • Critical 9.4
    CVE-2014-125118 Public exploit

    eScan 5.5-2 Web Management Console Command Injection

    A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to properly sanitize the 'pass' parameter when processing login requests to login.php, allowing an authenticated attacker with a valid username t…

    MicroWorld eScan Web Management Console