CVE-2019-18895

ALTO 7.8CVE-2019-18895 · Published 14/11/2019 · updated 17/06/2026

In breve

CVE-2019-18895 è una vulnerabilità ALTO (CVSS 7.8) che riguarda scanguard antivirus (scanguard).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.52%, superiore al 44.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
scanguard antivirus scanguard	`≤ 2019-11-12`	No fix yet

Description

Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file.

References

hyp3rlinx.altervista.org · Exploit
seclists.org/fulldisclosure/2019/Nov/5 · Third Party Advisory
packetstormsecurity.com/files/155319/ScanGuard-Antivirus-Insecure-Permissions.html · Exploit
support.scanguard.com/en/kb/22/upgrades-available · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free