CVE-2024-2003
Published: Jun 21, 2024
Modified: Aug 1, 2024
CVSS v3.1
7.3
Description
Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.
| Vendor | Product | Versions |
|---|---|---|
ESET, spol. s r.o. | ESET NOD32 Antivirus | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Internet Security | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Smart Security Premium | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Security Ultimate | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Small Business Security | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Safe Server | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Endpoint Antivirus for Windows | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Endpoint Security for Windows | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Server Security for Windows Server | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Mail Security for IBM Domino | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | affected 0 - < 1610 |
ESET, spol. s r.o. | ESET File Security for Microsoft Azure | affected 0 - < 1610 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now