CVE-2023-4383 - CVE House
Back to Database
Status published High CVE-2023-4383

MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions

Vulnerability Description

A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affects an unknown part of the file runasroot. The manipulation leads to incorrect execution-assigned permissions. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237315. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4383

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • dmknght (VulDB User)

References

More from MicroWorld

View All →
CVE-2025-1370
MicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injection
Medium 4.8
CVE-2025-0798
MicroWorld eScan Antivirus Quarantine rtscanner os command injection
Critical 9.2
CVE-2025-0797
MicroWorld eScan Antivirus Quarantine Microworld default permission
Medium 4.8
CVE-2024-13188
MicroWorld eScan Antivirus Installation var default permission
Medium 4.8
CVE-2014-125118
eScan 5.5-2 Web Management Console Command Injection
Critical 9.4

Affected Vendor

Affected Software

eScan Anti-Virus
Vulnerable Versions:
7.0.32

Timeline

Official Publish: August 16th, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-279

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.