Lucene search

ESETCVE-2024-3779

HistoryJul 16, 2024 - 9:15 a.m.

CVE-2024-3779

2024-07-1609:15:02

CWE-276

ESET

web.nvd.nist.gov

denial of service

vulnerability

product inoperable

eset’s security

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

Percentile

9.3%

JSON

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.

Affected configurations

Nvd

Node

esetinternet_securityRange<17.2.7.0

esetnod32Range<17.2.7.0

esetsecurityRange<17.2.7.0ultimate

esetsmart_securityRange<17.2.7.0premium

Node

esetendpoint_antivirusRange<11.1.2039.0windows

esetendpoint_securityRange<11.1.2039.0windows

Node

esetserver_securityRange<11.0.12012.0windows_server

Node

esetmail_securityRange≤11.0.10008.0exchange_server

Node

esetmail_securityMatch-domino

Node

esetsecurityRange<11.0.15004.0sharepoint_server

VendorProductVersionCPE
esetinternet_security*cpe:2.3:a:eset:internet_security:*:*:*:*:*:*:*:*
esetnod32*cpe:2.3:a:eset:nod32:*:*:*:*:*:*:*:*
esetsecurity*cpe:2.3:a:eset:security:*:*:*:*:ultimate:*:*:*
esetsmart_security*cpe:2.3:a:eset:smart_security:*:*:*:*:premium:*:*:*
esetendpoint_antivirus*cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:*
esetendpoint_security*cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:*
esetserver_security*cpe:2.3:a:eset:server_security:*:*:*:*:*:windows_server:*:*
esetmail_security*cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:*
esetmail_security-cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:*
esetsecurity*cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint_server:*:*

Vendor	Product	Version	CPE
eset	internet_security	*	cpe:2.3:a:eset:internet_security::::::::
eset	nod32	*	cpe:2.3:a:eset:nod32::::::::
eset	security	*	cpe:2.3:a:eset:security:::::ultimate:::*
eset	smart_security	*	cpe:2.3:a:eset:smart_security:::::premium:::*
eset	endpoint_antivirus	*	cpe:2.3:a:eset:endpoint_antivirus::::::windows::*
eset	endpoint_security	*	cpe:2.3:a:eset:endpoint_security::::::windows::*
eset	server_security	*	cpe:2.3:a:eset:server_security::::::windows_server::*
eset	mail_security	*	cpe:2.3:a:eset:mail_security::::::exchange_server::*
eset	mail_security	-	cpe:2.3:a:eset:mail_security:-:::::domino::
eset	security	*	cpe:2.3:a:eset:security::::::sharepoint_server::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ESET NOD32 Antivirus",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "17.1.13.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Internet Security",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "17.1.13.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Smart Security Premium",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "17.1.13.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Security Ultimate",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "17.1.13.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Endpoint Antivirus for Windows",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "11.0.2044.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Endpoint Security for Windows",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "11.0.2044.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Server Security for Windows Server",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "11.0.12011.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "11.0.10005.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Mail Security for IBM Domino",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ESET Security for Microsoft SharePoint Server",
    "vendor": "ESET s.r.o",
    "versions": [
      {
        "lessThanOrEqual": "11.0.15002.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

support.eset.com/en/ca8688

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

Percentile

9.3%

JSON

Related for CVE-2024-3779