Vulnerability · Published Jan 9, 2025 · Assigned by VulDB

CVE-2024-13206REVE Antivirus reveinstall default permission

High 7.8

In plain English

A high-severity incorrect default permissions in Antivirus from REVE. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.2%top 93.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
REVE	Antivirus	1.0.0.0

Weakness: CWE-276, CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

VDB-290799 | REVE Antivirus reveinstall default permission vdb-entry
VDB-290799 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #471160 | REVE Antivirus Antivirus for Linux 1.0.0.0 Incorrect Default Permissions third-party-advisory
https://github.com/hawkteam404/RnD_Public/blob/main/reve_av_multiple_vuln.md exploit