PT-2025-2046 · Microworld · Microword Escan Antivirus

Published 2025-01-08 · Updated 2025-10-09 · CVE-2024-13188

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MicroWorld eScan Antivirus version 7.0.32

Description A critical issue affects some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler, leading to incorrect default permissions. The attack must be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Recommendations For MicroWorld eScan Antivirus version 7.0.32, consider changing the default permissions of the /opt/MicroWorld/var/ directory to prevent exploitation until a patch is available. As a temporary workaround, restrict local access to the Installation Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Incorrect Privilege Assignment

Weakness Enumeration

CWE-276

CWE-266

Related Identifiers

CVE-2024-13188

Affected Products

Microword Escan Antivirus

References · 9

• 🔥 https://github.com/hawkteam404/RnD_Public/blob/main/escan_incorrect_default_perm.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-13188 · Security Note
• https://osv.dev/vulnerability/CVE-2024-13188 · Vendor Advisory
• https://vuldb.com/?ctiid.290780 · Note
• https://twitter.com/CVEnew/status/1877070626722128232 · Twitter Post
• https://t.me/cveNotify/138070 · Telegram Post
• https://vuldb.com/?submit.468796 · Note
• https://t.me/cvedetector/14729 · Telegram Post
• https://vuldb.com/?id.290780 · Note