Unauthorized Command Execution in ESET Cyber Security for macOS
CVE-2019-16519

7.8HIGH

Key Information:

Vendor

Eset

Status
Cyber Security
Endpoint Antivirus
Endpoint Security
Vendor
CVE Published:
14 October 2019

What is CVE-2019-16519?

ESET Cyber Security for macOS contains a vulnerability that can be exploited by local attackers to execute unauthorized commands with root privileges. This exploitation is made possible through an undocumented feature in the software's scheduled tasks functionality, allowing attackers to gain elevated access and potentially compromise system integrity.

References

http://support.eset.com/ca7317/
x_refsource_CONFIRM
https://danishcyberdefence.dk/blog/esets-cyber-security
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.