CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Input Validation
Summary: the eset personal firewall ndis filter (epfwndis.sys) driver in the firewall module build 1183 (20140214) and earlier in eset smart security and eset endpoint security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020cc ioctl call.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-09-23
Last Modified Date: 2014-09-24