CVE:CVE-2023-20052
CNNVD:CNNVD-202302-1349
ClamAV（Clam AntiVirus）是ClamAV团队的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。
ClamAV存在安全漏洞，该漏洞源于XML外部实体注入，未经身份验证的远程攻击者利用该漏洞可以访问受影响设备上的敏感信息。
solution:Upgrade cisco secure_endpoint to a higher version than 1.20.2,1.21.1,7.5.9,8.1.5,and avoid the version (,1.20.2),(,1.21.1),(,7.5.9),[8.0.1.21160,8.1.5); Upgrade cisco secure_endpoint_private_cloud to a higher version than 3.6.0,and avoid the version (,3.6.0); Upgrade clamav clamav to a higher version than 0.103.7,0.105.1,1.0.0,1.0.0:rc,1.0.0:rc2,and avoid the version (,0.103.7],[0.104.0,0.105.1],1.0.0,1.0.0:rc,1.0.0:rc2; Upgrade stormshield stormshield_network_security to a higher version than 3.7.35,3.11.23,4.3.17,4.6.4,and avoid the version [3.0.0,3.7.35),[3.8.0,3.11.23),[4.3.0,4.3.17),[4.4.0,4.6.4)