CVE-2020-9363 - CVE House
Back to Database
Status published High CVE-2020-9363

The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass...

Vulnerability Description

The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extraction.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-9363

Credits & Attribution

No credits recorded in the NVD database.

References

More from sophos

View All →
CVE-2020-9540
Sophos HitmanPro.Alert before build 861 allows local elevation of privilege....
High 7.8
CVE-2020-29574
An SQL injection vulnerability in the WebAdmin of Cyberoam OS...
Unknown 0
CVE-2020-25223
A remote code execution vulnerability exists in the WebAdmin of...
Unknown 0
CVE-2020-17352
Two OS command injection vulnerabilities in the User Portal of...
High 8.8
CVE-2020-15504
A SQL injection vulnerability in the user and admin web...
Critical 9.8

Affected Vendor

Affected Software

cloud optix, endpoint protection, intercept x endpoint, intercept x for server, mobile, secure web gateway
Vulnerable Versions:
0

Timeline

Official Publish: February 24th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.