high7.8
CVE-2024-0353
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Impact
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eset | Endpoint Antivirus | before 8.1.2062.0 from 9.0 before 9.1.2071.0 from 10.0 before 10.0.2052.0 from 10.1 before 10.1.2063.0 from 11.0 before 11.0.2032.0 |
| Eset | Endpoint Security | before 8.1.2062.0 from 9.0 before 9.1.2071.0 from 10.0 before 10.0.2052.0 from 10.1 before 10.1.2063.0 from 11.0 before 11.0.2032.0 |
| Eset | File Security | All versions |
| Eset | Internet Security | before 17.0.10.0 |
| Eset | Mail Security | before 7.3.10018.0 before 7.3.14006.0 from 8.0 before 8.0.10024.0 from 8.0 before 8.0.14014.0 from 9.0 before 9.0.10012.0 from 9.0 before 9.0.14008.0 |
| Eset | Nod32 Antivirus | before 17.0.10.0 |
| Eset | Security | before 7.3.15006.0 before 17.0.10.0 from 8.0 before 8.0.15012.0 from 9.0 before 9.0.15006.0 from 10.0 before 10.0.15005.0 |
| Eset | Server Security | before 7.3.12013.0 from 8.0 before 8.0.12016.0 from 9.0 before 9.0.12019.0 from 10.0 before 10.0.12015.0 |
| Eset | Smart Security | before 17.0.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed
- https://packetstormsecurity.com/files/179495/ESET-NOD32-Antivirus-17.2.7.0-Unquoted-Service-Path.html
- https://packetstormsecurity.com/files/182464/ESET-NOD32-Antivirus-18.0.12.0-Unquoted-Service-Path.html
- https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed
- https://www.exploit-db.com/exploits/51351
- https://www.exploit-db.com/exploits/51964