CVE-2020-9320
Medium
Description
Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product
SeverityMedium
CVSS5.5
Exploit probability—
ProductAvira Anti-malware Sdk
PublishedFeb 20, 2020
First seenFeb 20, 2020
How to fix
Update
- avira anti-malware_sdk8.3.54.138 or later
- avira antivirus_server8.3.54.138 or later
- avira avira_antivirus_for_endpoint8.3.54.138 or later
- avira avira_antivirus_for_small_business8.3.54.138 or later
- avira avira_exchange_security8.3.54.138 or later
- avira avira_free_security_suite8.3.54.138 or later
- avira avira_internet_security_suite8.3.54.138 or later
- avira avira_prime8.3.54.138 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avira anti-malware_sdk | v < 8.3.54.138 | 8.3.54.138 |
| avira antivirus_server | v < 8.3.54.138 | 8.3.54.138 |
| avira avira_antivirus_for_endpoint | v < 8.3.54.138 | 8.3.54.138 |
| avira avira_antivirus_for_small_business | v < 8.3.54.138 | 8.3.54.138 |
| avira avira_exchange_security | v < 8.3.54.138 | 8.3.54.138 |
| avira avira_free_security_suite | v < 8.3.54.138 | 8.3.54.138 |
| avira avira_internet_security_suite | v < 8.3.54.138 | 8.3.54.138 |
| avira avira_prime | v < 8.3.54.138 | 8.3.54.138 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.