CVE-2025-0797

MicroWorld eScan Antivirus Quarantine Microworld default permission

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected

MicroWorld · eScan Antivirus

CVSS v4.0 VULDB

4.8 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULDB

3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CVSS v2.0 VULDB

1.7 LOWAV:L/AC:L/Au:S/C:N/I:P/A:N

EPSS

0.30% chance of exploitation in the next 30 days, 22nd percentile

Published

2025-01-29

Updated

2025-02-12

Proof-of-concept exploits (1)

• dmknght/FIS_RnD/blob/main/escan_av_incorrect_default_perms_leads_to_malware_evasion.md

Security advisories

• https://vuldb.com/?id.293920
• https://vuldb.com/?submit.484329

References

• CVE Record
• NVD entry

Related

• CVE-2025-0798
• CVE-2025-1364
• CVE-2025-1366
• CVE-2025-1367
• CVE-2025-1368
• CVE-2025-1369