CVE-2024-48293

Incorrect access control in QuickHeal Antivirus Pro 24.1.0.182 and earlier allows authenticated attackers with low-level privileges to arbitrarily modify antivirus settings.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - cve@mitre.org

Published

2024-11-18

Last modified

2024-11-19

Weaknesses

CWE-276

Affected products

• Quickheal Antivirus Pro (Quickheal Antivirus Pro)

References

• https://github.com/Nero22k/Disclosures/blob/main/QuickHealAV/CVE-2024-48293.md
• https://www.quickheal.com/download-free-antivirus/