The Nigerian Communications Commission (NCC) has advised telecom consumers and other Information and Communications Technology (ICT) end users on the need to always enable automatic update features for AVAST and AVG antiviruses to prevent potential cyber vulnerabilities.
This was contained in a new advisory released by the Computer Security Incident Response Team (CSIRT), the cybersecurity centre for the telecom sector established by the Commission, in continuation of its resolve to always keep Nigerians safe in the cyber space.
The advisory noted that cyber vulnerability in AVAST and AVG Antiviruses can lead to attacks on millions of devices with high impact in terms of consequences to the ICT user. The threat types as a result of this vulnerability are Bypass Authentication, Remote Code Execution and Unauthorised Access while consequences range from Privilege Escalation, Bypass Security Products, Overwrite System Components and corrupting the Operating System.
According to CSIRT, researchers at SentinelOne security firm have discovered two potentially damaging vulnerabilities in AVAST and AVG antivirus products that allow attackers to escalate privileges enabling them to disable security products, overwrite system components, corrupt the operating system, or perform malicious operations unimpeded.
“Two vulnerabilities identified as CVE-2022-26522 and CVE-2022-26523 targeted the “Anti Rootkit” driver of Avast antivirus (also used by AVG) allowing an attacker with limited privileges on the targeted system to execute code in system mode (kernel mode) and take complete control of the device. Moreover, the vulnerabilities allow complete take-over of a device, even without privileges, due to the ability to execute code in kernel mode,” the CSIRT said in the advisory.
However, the cybersecurity centre has offered a tripartite measures that should be taken by Internet/ICT users to prevent being vulnerable to the cyber threats. They include enabling automatic update feature for AVAST and AVG antiviruses, upgrading AVAST and AVG antiviruses to version 22.1.2504, as well as carrying out regular patch management.
Dr. Ikechukwu Adinde
Director, Public Affairs
May 22, 2022
more recommended stories
Regional Security:President Buhari Thanks Portugal For Support
President Muhammadu Buhari on Thursday night.
Calabar Port Receives First Large Vessel In 3 Years
Activities at the Calabar Port were.
Security Challenges:We must Take The Fight To The Bad Guys-Gov. Sule
Nasarawa State Governor, Engr. Abdullahi A..
Osun 2022: Bankole Urges INEC To Guarantee Inclusion Of PWDs On Election Day
Bankole gave thumbs up to INEC.
Army Set To Celebrates 159 Years Of Existence In Imo
The Nigerian Army is set to.
Why Nasarawa’s Future Is In Oil And Gas, Says Engineer Sule
Nasarawa State Governor, Engineer Abdullahi Sule,.
Engineer Sule Approves Recruitment of Additional 550 Teachers
…Warns only qualified, competent teachers’ll make.
Pantami Takes Digital Economic Agenda to Minna
Pantami who spoke to an audience.
Constitutional Role For Traditional Rulers ‘ll Address Insecurity -Engineer Sule
Chairman, Board of Trustees of.
Fuel Scarcity: Group condemns planned protest against NNPC
The group wondered why the.