PT-2023-3648 · Eset · Eset Endpoint Antivirus+2

CVE-2023-2847 · Publicado 2023-06-14 · Atualizado 2023-07-05

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ESET Server Security (affected versions not specified) ESET Endpoint Antivirus (affected versions not specified) ESET Cyber Security (affected versions not specified) ESET Endpoint Antivirus (affected versions not specified)

Description A local privilege escalation issue has been identified due to improper privilege management. This allows a user with lower privileges to trigger actions with root privileges. ESET has prepared new builds of its products that are no longer susceptible to this issue.

Recommendations For ESET Server Security, update to a newer version that includes the fix for this issue. For ESET Endpoint Antivirus, update to a newer version that includes the fix for this issue. For ESET Cyber Security, update to a newer version that includes the fix for this issue. For ESET Endpoint Antivirus, update to a newer version that includes the fix for this issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

BDU:2023-03932

CVE-2023-2847

Produtos afetados

Eset Cyber Security

Eset Endpoint Antivirus

Eset Server Security

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-2847 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-2847 · Aviso do Fabricante
• https://t.me/pentestingnews/36919 · Publicação no Telegram
• https://support.eset.com/en/ca8447 · Aviso do Fabricante
• https://t.me/cibsecurity/65259 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-03932 · Nota de Segurança
• https://vuldb.com/ru/?id.231621 · Nota
• https://support.eset.com/en/ca8447-local-privilege-escalation-vulnerability-in-eset-products-for-linux-and-macos-fixed · Nota
• https://t.me/cvenotify/52385 · Publicação no Telegram