( Tassadar | 2021. 01. 13., sze - 16:18 )

Nem éppen példátlan a vírusirtók között:

"The esets_daemon service in ESET Endpoint Antivirus for macOS before and Endpoint Security for macOS before does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root."


"AVG Remote Administration version suffers from authentication bypass, remote code execution, missing entity authentication, and use of static encryption key vulnerabilities."