ESET File Operations Vulnerability Allows Local Privilege Escalation
CVE-2024-2003

7.3HIGH

Key Information:

Vendor

Eset, Spol. S R.o.

Status
Eset Nod32 Antivirus
Eset Internet Security
Eset Smart Security Premium
Eset Security Ultimate
Vendor
CVE Published:
21 June 2024

What is CVE-2024-2003?

A local privilege escalation vulnerability exists in ESET's security products that can be exploited during the restoration of files from quarantine. This flaw allows attackers to improperly leverage ESET's file operations, potentially leading to unauthorized access and control over sensitive system resources. Users of affected ESET products are advised to apply necessary updates and patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

ESET Endpoint Antivirus for Windows 0 < 1610

ESET Endpoint Security for Windows 0 < 1610

ESET File Security for Microsoft Azure 0 < 1610

References

https://support.eset.com/ca8674

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-2003 : ESET File Operations Vulnerability Allows Local Privilege Escalation