Unscored severity · published Nov 4, 2014
CVE-2014-4974
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Personal Firewall Ndis Filter · Eset
through 1183_\(20140214\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4974
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4974
packetstormsecurity.com
http://packetstormsecurity.com/files/128874/ESET-7.0-Kernel-Memory-Leak.html
seclists.org
http://seclists.org/fulldisclosure/2014/Oct/118
www.securityfocus.com
http://www.securityfocus.com/bid/70770
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/98312
www.portcullis-security.com
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4974/