Unscored severity · published Sep 23, 2014
CVE-2014-4973
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Endpoint Security · Eset
5.0.2113; 5.0.2122; 5.0.2126; 5.0.2214; 5.0.2225; 5.0.2228 · source: NVD
SS
Smart Security · Eset
5.0.94; 5.0.95; 5.2.9; 5.2.15; 6.0.306; 6.0.308; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4973
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4973
seclists.org
http://seclists.org/fulldisclosure/2014/Aug/52
Exploit
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/
More from Endpoint Security
8.6
CVE-2023-5594
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted
7.8
CVE-2024-0353
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission
7.8
CVE-2023-3160
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions
7.8
CVE-2021-37851
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher…
7.8
CVE-2021-37852
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT…