Approved changes feed: RSS · Atom

cpe:2.3:a:escanav:escan_anti-virus:7.0.32:*:*:*:*:linux:*:*

part: a version: 7.0.32 update: *

VendorEscanav (ab3b6d18-a4f1-5872-8902-8bcb1686d6d1)
ProductEscan Anti Virus (c68ddebe-13b8-532f-94ec-37474df75a6e)
Edition*
Language*
Software edition*
Target softwarelinux
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1370 vulnerable 2026-06-08 07:08:36.665169 MicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injection
MEDIUM (5.3)
A vulnerability, which was classified as critical, has been found in MicroWorld eScan Antivirus 7.0.32 on Linux. Affected by this issue is the function sprintf of the file epsdaemon of the component Autoscan USB. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-02-17T02:00:14.070Z
Updated: 2025-02-18T19:32:57.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1369 vulnerable 2026-06-08 07:08:36.660714 MicroWord eScan Antivirus USB Password os command injection
MEDIUM (4.5)
A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerability is an unknown functionality of the component USB Password Handler. The manipulation leads to os command injection. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-02-17T01:31:04.446Z
Updated: 2025-02-18T19:33:05.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1368 vulnerable 2026-06-08 07:08:36.660246 MicroWord eScan Antivirus mwav.conf ReadConfiguration buffer overflow
LOW (2.3)
A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects the function ReadConfiguration of the file /opt/MicroWorld/etc/mwav.conf. The manipulation of the argument BasePath leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-02-17T01:00:11.214Z
Updated: 2025-02-18T19:33:13.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1367 vulnerable 2026-06-08 07:08:36.659788 MicroWord eScan Antivirus USB Password sprintf buffer overflow
MEDIUM (5.3)
A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component USB Password Handler. The manipulation leads to buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-02-17T00:31:03.915Z
Updated: 2025-02-18T19:33:23.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1366 vulnerable 2026-06-08 07:08:36.659313 MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow
MEDIUM (5.3)
A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issue is the function strcpy of the component VirusPopUp. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-02-17T00:00:16.054Z
Updated: 2025-02-18T15:58:00.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1364 vulnerable 2026-06-08 07:08:36.658337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0798 vulnerable 2026-06-08 07:02:25.557530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0797 vulnerable 2026-06-08 07:02:25.557161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0720 vulnerable 2026-06-08 07:02:25.249112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13188 vulnerable 2026-06-08 06:25:36.927288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4383 vulnerable 2026-06-08 06:16:12.227710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.