What’s Vulnerable › Vulnerabilities

CVE-2020-10193

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-06 · updated 2026-06-17
• Weakness: CWE-436

Description

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

Affected products

• ESET Cyber Security: before 1294 — fixed in 1294
• ESET Internet Security: before 1294 — fixed in 1294
• ESET Mobile Security: before 1294; 1294 — fixed in 1294
• ESET Nod32 Antivirus: before 4; before 1294 — fixed in 1294, 4
• ESET Smart Security: before 1294 — fixed in 1294
• ESET Smart Tv Security: before 1294 — fixed in 1294

How to fix

Upgrade to a fixed version: ESET Cyber Security 1294; ESET Internet Security 1294; ESET Mobile Security 1294; ESET Nod32 Antivirus 1294, 4; ESET Smart Security 1294; ESET Smart Tv Security 1294. Check the vendor advisory for mitigations.

References

• https://blog.zoller.lu/p/from-low-hanging-fruit-department_13.html
• https://blog.zoller.lu/p/from-low-hanging-fruit-department_13.html

Get alerted when CVE-2020-10193 or the next vulnerability affects your stack