Lucene search

K
vulnrichmentESETVULNRICHMENT:CVE-2024-3779
HistoryJul 16, 2024 - 8:17 a.m.

CVE-2024-3779 Denial of Service in ESET products for Windows

2024-07-1608:17:59
CWE-276
ESET
github.com
1
denial of service
eset products
windows
cve-2024-3779

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

0

Percentile

9.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.

CNA Affected

[
  {
    "vendor": "ESET s.r.o",
    "product": "ESET NOD32 Antivirus",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "17.1.13.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Internet Security",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "17.1.13.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Smart Security Premium",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "17.1.13.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Security Ultimate",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "17.1.13.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Endpoint Antivirus for Windows",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "11.0.2044.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Endpoint Security for Windows",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "11.0.2044.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Server Security for Windows Server",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "11.0.12011.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "11.0.10005.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Mail Security for IBM Domino",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "ESET s.r.o",
    "product": "ESET Security for Microsoft SharePoint Server",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "11.0.15002.0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

0

Percentile

9.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-3779