Lucene search

[email protected]CVE-2023-3160

HistoryAug 14, 2023 - 10:15 a.m.

CVE-2023-3160

2023-08-1410:15:09

CWE-269

[email protected]

web.nvd.nist.gov

cve-2023-3160

eset

vulnerability

file operations

unauthorized access

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

15.2%

JSON

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.

CPENameOperatorVersion
eset:endpoint_antiviruseset endpoint antiviruseq-
eset:endpoint_securityeset endpoint securityeq-
eset:internet_securityeset internet securityeq-
eset:mail_securityeset mail securityeq-
eset:nod32eset nod32eq-
eset:securityeset securityeq-
eset:server_securityeset server securityeq-
eset:smart_securityeset smart securityeq-

CPE	Name	Operator	Version
eset:endpoint_antivirus	eset endpoint antivirus	eq	-
eset:endpoint_security	eset endpoint security	eq	-
eset:internet_security	eset internet security	eq	-
eset:mail_security	eset mail security	eq	-
eset:nod32	eset nod32	eq	-
eset:security	eset security	eq	-
eset:server_security	eset server security	eq	-
eset:smart_security	eset smart security	eq	-

References

support.eset.com/en/ca8466

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

15.2%

JSON

Related for CVE-2023-3160

zdi1 prion1 cvelist1