CVE-2014-4973

2014-09-2315:55:00

CWE-20

[email protected]

web.nvd.nist.gov

eset

personal firewall

ndis filter

epfwndis.sys

firewall module

smart security

endpoint security

cve-2014-4973

nvd

6.7 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.

CPENameOperatorVersion
eset:smart_securityeset smart securityeq5.0.94
eset:smart_securityeset smart securityeq5.2.9
eset:smart_securityeset smart securityeq6.0.314
eset:smart_securityeset smart securityeq5.2.15
eset:smart_securityeset smart securityeq6.0.316
eset:smart_securityeset smart securityeq6.0.308
eset:smart_securityeset smart securityeq5.0.95
eset:smart_securityeset smart securityeq6.0.306
eset:endpoint_securityeset endpoint securityeq5.0.2113
eset:endpoint_securityeset endpoint securityeq5.0.2126

CPE	Name	Operator	Version
eset:smart_security	eset smart security	eq	5.0.94
eset:smart_security	eset smart security	eq	5.2.9
eset:smart_security	eset smart security	eq	6.0.314
eset:smart_security	eset smart security	eq	5.2.15
eset:smart_security	eset smart security	eq	6.0.316
eset:smart_security	eset smart security	eq	6.0.308
eset:smart_security	eset smart security	eq	5.0.95
eset:smart_security	eset smart security	eq	6.0.306
eset:endpoint_security	eset endpoint security	eq	5.0.2113
eset:endpoint_security	eset endpoint security	eq	5.0.2126