CVE-2020-27585

Medium

Description

Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password.

SeverityMedium
CVSS4.4
Exploit probability—
ProductQuickheal Total Security
PublishedNov 30, 2020
First seenNov 30, 2020

How to fix

Update
  • quickheal total_security19.00 or later

Affected products

ProductAffected versionsFixed in
quickheal total_securityv < 19.0019.00

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.