CVE-2023-7043
Assigner: ESET
Published: 2024-01-31T12:51:38.253Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: ESET Endpoint Security
vendor: ESET, spol. s r.o.
versions: lessThanOrEqual: 10.1.2063.x
status: affected
version: 10.1.2046.x
versionType: custom
defaultStatus: unaffected
product: ESET Endpoint Antivirus
vendor: ESET, spol. s r.o.
versions: lessThanOrEqual: 10.1.2063.x
status: affected
version: 10.1.2046.x
versionType: custom
defaultStatus: unaffected
product: ESET NOD32 Antivirus
vendor: ESET, spol. s r.o.
versions: lessThanOrEqual: 16.2.15.0
status: affected
version: 16.1.14.0
versionType: custom
defaultStatus: unaffected
product: ESET Internet Security
vendor: ESET, spol. s r.o.
versions: lessThanOrEqual: 16.2.15.0
status: affected
version: 16.1.14.0
versionType: custom
defaultStatus: unaffected
product: ESET Smart Security Premium
vendor: ESET, spol. s r.o.
versions: lessThanOrEqual: 16.2.15.0
status: affected
version: 16.1.14.0
versionType: custom
defaultStatus: unaffected
product: ESET Mail Security for Microsoft Exchange Server
vendor: ESET, spol. s r.o.
versions: status: affected
version: 10.1.10012.0
datePublic: 2024-01-26T11:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Unquoted service path in ESET products allows to 

<span style="background-color: rgb(255, 255, 255);">drop a prepared program to a specific location</span>&nbsp;and&nbsp;<span style="background-color: rgb(255, 255, 255);">run on boot with </span><span style="background-color: rgb(255, 255, 255);">the 

NT AUTHORITY\NetworkService&nbsp;permissions.</span>
value: Unquoted service path in ESET products allows to 

drop a prepared program to a specific location and run on boot with the 

NT AUTHORITY\NetworkService permissions.
impacts: capecId: CAPEC-233
descriptions: value: CAPEC-233 Privilege Escalation
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-428
description: CWE-428 Unquoted Search Path or Element
type: CWE
source: advisory: ca8602
discovery: UNKNOWN
title: Unquoted path privilege vulnerability in ESET products for Windows
x_generator: engine: Vulnogram 0.1.0-dev