Lucene search

K
cvelistESETCVELIST:CVE-2023-3160
HistoryAug 14, 2023 - 9:27 a.m.

CVE-2023-3160 Local privilege escalation in security products for Windows

2023-08-1409:27:02
CWE-269
ESET
www.cve.org
1
vulnerability
eset
file operations
module update
permissions

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET NOD32 Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Internet Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Smart Security Premium",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Endpoint Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Endpoint Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Server Security for Windows Server (File Security)",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Mail Security for IBM Domino",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Security for Microsoft SharePoint Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

Related for CVELIST:CVE-2023-3160