PT-2014-6236 · Eset · Eset Endpoint Security+2

Publicado 2014-09-23 · Atualizado 2014-09-24 · CVE-2014-4973

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ESET Smart Security versions 5.0 through 7.0 ESET Endpoint Security versions 5.0 through 7.0

Description The issue allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call. This is related to the ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 and earlier.

Recommendations For ESET Smart Security versions 5.0 through 7.0, update the Firewall Module to a version later than Build 1183. For ESET Endpoint Security versions 5.0 through 7.0, update the Firewall Module to a version later than Build 1183.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-4973

Produtos afetados

Eset Endpoint Security

Eset Personal Firewall

Eset Smart Security

Referências · 3

• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973 · Exploit
• http://seclists.org/fulldisclosure/2014/Aug/52 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4973 · Nota de Segurança