Insecure Update Mechanism in MicroWorld eScan Antivirus Software

CVE-2024-13990

What is CVE-2024-13990?

MicroWorld eScan Antivirus suffers from a vulnerability in its update mechanism, which lacked adequate cryptographic verification processes. This oversight permits an on-path attacker to execute a man-in-the-middle attack, substituting malicious update payloads for legitimate ones. The affected eScan AV client may accept these corrupted updates, potentially loading harmful components such as sideloaded DLLs and malicious Java installer payloads, leading to remote code execution on impacted systems. While MicroWorld claims to have resolved the issues related to the update mechanism in July 2023, the lack of detailed versioning information raises concerns about the security of earlier versions.

References