1. Home
  2. CVE Database
  3. CVE-2020-10193
HIGH · 7.5

CVE-2020-10193

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Secur...

Vulnerability Description

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
EsetCyber Security< 1294
EsetInternet Security< 1294
EsetMobile Security< 1294
EsetNod32 Antivirus< 4
EsetSmart Security< 1294
EsetSmart Tv Security< 1294

Related Weaknesses (CWE)

CWE-436

References

FAQ

What is CVE-2020-10193?

CVE-2020-10193 is a vulnerability with a CVSS score of 7.5 (HIGH). ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Secur...

How severe is CVE-2020-10193?

CVE-2020-10193 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-10193?

Check the references section above for vendor advisories and patch information. Affected products include: Eset Cyber Security, Eset Internet Security, Eset Mobile Security, Eset Nod32 Antivirus, Eset Smart Security.