ESET File Operations Vulnerability Allows Local Privilege Escalation
CVE-2024-2003

7.3HIGH

Key Information:

Vendor

Eset, Spol. S R.o.

Status
Eset Nod32 Antivirus
Eset Internet Security
Eset Smart Security Premium
Eset Security Ultimate
Vendor
CVE Published:
21 June 2024

What is CVE-2024-2003?

A local privilege escalation vulnerability exists in ESET's security products that can be exploited during the restoration of files from quarantine. This flaw allows attackers to improperly leverage ESET's file operations, potentially leading to unauthorized access and control over sensitive system resources. Users of affected ESET products are advised to apply necessary updates and patches to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ESET Endpoint Antivirus for Windows 0 < 1610

ESET Endpoint Security for Windows 0 < 1610

ESET File Security for Microsoft Azure 0 < 1610

References

https://support.eset.com/ca8674

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.