Unquoted path privilege vulnerability in ESET products for Windows
CVE-2023-7043

3.3LOW

Key Information:

Vendor: Eset, Spol. S R.o.
Status: Eset Endpoint Security; Eset Endpoint Antivirus; Eset Nod32 Antivirus; Eset Internet Security
Vendor: CVE Published:; 31 January 2024

What is CVE-2023-7043?

Unquoted service path in ESET products allows to

drop a prepared program to a specific location and run on boot with the

NT AUTHORITY\NetworkService permissions.

ESET Endpoint Antivirus 10.1.2046.x <= 10.1.2063.x

ESET Endpoint Security 10.1.2046.x <= 10.1.2063.x

ESET Internet Security 16.1.14.0 <= 16.2.15.0

Score:

3.3

Severity:

LOW

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet