CVE-2025-1368 - CVE House
Back to Database
Status published Medium CVE-2025-1368

MicroWord eScan Antivirus mwav.conf ReadConfiguration buffer overflow

Vulnerability Description

A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects the function ReadConfiguration of the file /opt/MicroWorld/etc/mwav.conf. The manipulation of the argument BasePath leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1368

Credits & Attribution

No credits recorded in the NVD database.

References

More from MicroWord

View All →
CVE-2025-1369
MicroWord eScan Antivirus USB Password os command injection
Low 2
CVE-2025-1367
MicroWord eScan Antivirus USB Password sprintf buffer overflow
Medium 4.8
CVE-2025-1366
MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow
Medium 4.8
CVE-2025-1364
MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflow
Medium 4.8

Affected Vendor

Affected Software

eScan Antivirus
Vulnerable Versions:
7.0.32

Timeline

Official Publish: February 17th, 2025
Last Modified: February 18th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-120 CWE-119

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control