Medium severity · published May 8, 2020
CVE-2020-12680
Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials
5.5
CVSS
0.3%
EPSS
No
On KEV
Description
Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials stored in Chrome, Firefox, Opera, and Edge. The executable does not verify the calling program and thus a request such as fetchChromePasswords or fetchCredentials will succeed. NOTE: some third parties have stated that this is "not a vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Free Antivirus · Avira
through 15.0.2005.1866 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12680
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12680
medium.com
https://medium.com/%40knikolenko/avira-free-antivirus-password-collector-83452fa7f943
Third Party Advisory
https://twitter.com/taviso/status/1258448515912491026
More from Free Antivirus
9.8
CVE-2020-8961
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825
8.8
CVE-2019-18568
Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user