Skip to content
OpenAdvisories
Low · 3.3 CVE-2023-7043 EUVD-2023-59230GHSA-m5qf-4xvf-462h

Unquoted path privilege vulnerability in ESET products for Windows

Published Jan 31, 2024 · Updated Oct 17, 2024 · Assigned by ESET

Vendor: ESET spol. s.r.o. Product: ESET Endpoint Antivirus Product: ESET Endpoint Security Product: ESET Internet Security Product: ESET Mail Security for Microsoft Exchange Server Product: ESET NOD32 Antivirus Product: ESET Smart Security Premium

Description

Unquoted service path in ESET products allows to

drop a prepared program to a specific location and run on boot with the

NT AUTHORITY\NetworkService permissions.

Affected products

VendorProductAffectedFixed
ESET, spol. s r.o. ESET Endpoint Security 10.1.2046.x – ≤ 10.1.2063.x —
ESET, spol. s r.o. ESET Endpoint Antivirus 10.1.2046.x – ≤ 10.1.2063.x —
ESET, spol. s r.o. ESET NOD32 Antivirus 16.1.14.0 – ≤ 16.2.15.0 —
ESET, spol. s r.o. ESET Internet Security 16.1.14.0 – ≤ 16.2.15.0 —
ESET, spol. s r.o. ESET Smart Security Premium 16.1.14.0 – ≤ 16.2.15.0 —
ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 10.1.10012.0 —

Advisories 1

References