CVE-2023-5594

🗓️ 21 Dec 2023 11:30:41Reported by ESETType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 57 Views

Improper validation of server’s certificate chain in secure traffic scanning featur

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the scanning function of SSL/TLS-protocol-based antivirus software from ESET, including ESET NOD32, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Endpoint Antivirus for Linux, ESET Server Security for Windows Server (File Security for Microsoft Windows Server), ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure, and ESET Server Security for Linux, allows attackers to bypass the security measures.	26 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-5594	21 Dec 202313:28	–	circl
CNNVD	Selected ESET Products Security Vulnerabilities	21 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-5594 Improper following of a certificate's chain of trust in ESET security products	21 Dec 202311:30	–	cvelist
EUVD	EUVD-2023-57887	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5594	21 Dec 202312:15	–	nvd
OSV	CVE-2023-5594	21 Dec 202312:15	–	osv
Prion	Input validation	21 Dec 202312:15	–	prion
Positive Technologies	PT-2023-7999 · Eset · Eset Security For Microsoft Sharepoint Server +12	21 Dec 202300:00	–	ptsecurity

NVD

Node

eset endpoint_antivirusRange10.0≥linux

eset endpoint_antivirusMatch-windows

eset endpoint_securityMatch-windows

eset file_securityMatch-azure

eset internet_securityMatch-

eset mail_securityMatch-domino

eset mail_securityMatch-exchange_server

eset nod32_antivirusMatch-

eset securityMatch-sharepoint_server

eset securityMatch-ultimate

eset server_securityRange10.1≥linux

eset server_securityMatch-windows_server

eset smart_securityMatch-premium

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET NOD32 Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Internet Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Smart Security Premium",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Security Ultimate",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Endpoint Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Endpoint Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Endpoint Antivirus for Linux 10.0 and above",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Server Security for Windows Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Mail Security for IBM Domino",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Security for Microsoft SharePoint Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET File Security for Microsoft Azure",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Internet protection module"
    ],
    "product": "ESET Server Security for Linux 10.1 and above ",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1464"
      }
    ]
  }
]

Source	Link
support	www.support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed

17 Jun 2026 06:48Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.5 - 8.6

EPSS0.00376

CWE-295