title: Local privilege escalation in security products for Windows
description:
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.
problem types: CWE-269 Improper Privilege Management
affected:
{
defaultStatus: unaffected
modules: HIPS
product: ESET NOD32 Antivirus
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Internet Security
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Smart Security Premium
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Endpoint Antivirus
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Endpoint Security
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Server Security for Windows Server (File Security)
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Mail Security for Microsoft Exchange Server
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Mail Security for IBM Domino
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
{
defaultStatus: unaffected
modules: HIPS
product: ESET Security for Microsoft SharePoint Server
vendor: ESET, spol. s r.o.
versions:
status: unaffected, version: 1463
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL