Vulnerability in Teclib-edition Armadito_antivirus

CVE-2018-7289

An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames containing pure UTF-16 characters can bypass detection. The user-mode service will fail to open the file for scanning after…

EPSS: 0.018 (75.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2018-7289?
CVE-2018-7289 is a low-severity vulnerability in Teclib-edition Armadito_antivirus, classified under CWE-172. CVSS score: 3.3/10. Published 2018-02-21.
How severe is CVE-2018-7289?
Low severity. CVSS v3 base score is 3.3 out of 10.