CVE-2020-9320 - CVE House
Back to Database
Status published Medium CVE-2020-9320

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a...

Vulnerability Description

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-9320

Credits & Attribution

No credits recorded in the NVD database.

References

More from avira

View All →
CVE-2020-8961
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The...
Critical 9.8
CVE-2020-12680
Avira Free Antivirus through 15.0.2005.1866 allows local users to discover...
Medium 5.5
CVE-2020-12463
An elevation of privilege vulnerability exists in Avira Software Updater...
High 7.8
CVE-2020-12254
Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or...
High 7.8
CVE-2019-17449
Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack....
Medium 6.7

Affected Vendor

Affected Software

anti-malware sdk, antivirus server, avira antivirus for endpoint, avira antivirus for small business, avira exchange security, avira free security suite, avira internet security suite, avira prime
Vulnerable Versions:
0

Timeline

Official Publish: February 20th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.