CVE-2020-10193
High
Description
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
SeverityHigh
CVSS7.5
Exploit probability—
ProductEset Cyber Security
PublishedMar 6, 2020
First seenMar 6, 2020
How to fix
Update
- eset cyber_security1294 or later
- eset internet_security1294 or later
- eset mobile_security1294 or later
- eset nod32_antivirus4, 1294 or later
- eset smart_security1294 or later
- eset smart_tv_security1294 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset cyber_security | v < 1294 | 1294 |
| eset internet_security | v < 1294 | 1294 |
| eset mobile_security | v < 1294, 1294 | 1294 |
| eset nod32_antivirus | v < 4, v < 1294 | 4, 1294 |
| eset smart_security | v < 1294 | 1294 |
| eset smart_tv_security | v < 1294 | 1294 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.