Описание
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2024-0353
- https://packetstormsecurity.com/files/179495/ESET-NOD32-Antivirus-17.2.7.0-Unquoted-Service-Path.html
- https://packetstormsecurity.com/files/182464/ESET-NOD32-Antivirus-18.0.12.0-Unquoted-Service-Path.html
- https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed
- https://www.exploit-db.com/exploits/51351
- https://www.exploit-db.com/exploits/51964
Связанные уязвимости
CVSS3: 7.8
nvd
почти 2 года назад
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
CVSS3: 7.8
fstec
почти 2 года назад
Уязвимость обработчика операций с файлами программного обеспечения антивирусных программных продуктов ESET, позволяющая нарушителю удалять произвольные файлы в системе