CVE-2023-3160 Local privilege escalation in security products for Windows

🗓️ 14 Aug 2023 09:27:02Reported by ESETType

Local privilege escalation CVE-2023-3160 for Windows

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the user interface of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, and ESET Security for Microsoft SharePoint Server allows attackers to increase their privileges.	18 Aug 202300:00	–	bdu_fstec
CNNVD	ESET Eset Endpoint Antivirus and Eset Server Security Security Vulnerabilities	14 Aug 202300:00	–	cnnvd
CVE	CVE-2023-3160	14 Aug 202309:27	–	cve
EUVD	EUVD-2023-43844	3 Oct 202520:07	–	euvd
NVD	CVE-2023-3160	14 Aug 202310:15	–	nvd
Prion	Design/Logic Flaw	14 Aug 202310:15	–	prion
Positive Technologies	PT-2023-4416 · Eset +2 · Eset Endpoint Antivirus +12	11 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-3160	23 May 202505:18	–	redhatcve
Vulnrichment	CVE-2023-3160 Local privilege escalation in security products for Windows	14 Aug 202309:27	–	vulnrichment
Zero Day Initiative	ESET Smart Security Link Following Local Privilege Escalation Vulnerability	15 Aug 202300:00	–	zdi

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET NOD32 Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Internet Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Smart Security Premium",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Endpoint Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Endpoint Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Server Security for Windows Server (File Security)",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Mail Security for IBM Domino",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Security for Microsoft SharePoint Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  }
]

Source	Link
support	www.support.eset.com/en/ca8466

14 Aug 2023 09:27Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.8

EPSS0.00052

CWE-269