High severity · published Jun 15, 2023
CVE-2023-2847
During internal security analysis, a local privilege escalation vulnerability has been identified
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cyber Security · Eset
7.3.0 before 7.3.3700.0 · source: NVD
EA
Endpoint Antivirus · Eset
before 8.1.12.0; 7.0.0 before 7.3.3600.0; 9.0.5.0 before 9.0.10.0; 9.1.4.0 before 9.1.11.0 · source: NVD
SS
Server Security · Eset
before 8.1.823.0; 9.0.464.0 before 9.0.466.0; 9.1.96.0 before 9.1.98.0 · source: NVD
Affected product
CS
Cyber Security
Eset
More from Cyber Security
9.8
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
7.8
CVE-2019-16519
ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks
7.5
CVE-2020-10193
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive
6.7
CVE-2019-19792
A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files
6.5
CVE-2019-17549
ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes