Lucene search

PRIOn knowledge basePRION:CVE-2014-4973

HistorySep 23, 2014 - 3:55 p.m.

Code injection

2014-09-2315:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.

CPENameOperatorVersion
endpoint_securityeq5.0.2113
endpoint_securityeq5.0.2126
endpoint_securityeq5.0.2228
endpoint_securityeq5.0.2225
endpoint_securityeq5.0.2214
endpoint_securityeq5.0.2122
smart_securityeq5.0.94
smart_securityeq5.2.9
smart_securityeq6.0.314
smart_securityeq5.2.15

Name	Operator	Version
endpoint_security	eq	5.0.2113
endpoint_security	eq	5.0.2126
endpoint_security	eq	5.0.2228
endpoint_security	eq	5.0.2225
endpoint_security	eq	5.0.2214
endpoint_security	eq	5.0.2122
smart_security	eq	5.0.94
smart_security	eq	5.2.9
smart_security	eq	6.0.314
smart_security	eq	5.2.15

Rows per page:

1-10 of 141

References

seclists.org/fulldisclosure/2014/Aug/52

www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for PRION:CVE-2014-4973