PT-2014-6236 · Eset · Eset Endpoint Security+2

Published 2014-09-23 · Updated 2014-09-24 · CVE-2014-4973

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ESET Smart Security versions 5.0 through 7.0 ESET Endpoint Security versions 5.0 through 7.0

Description The issue allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call. This is related to the ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 and earlier.

Recommendations For ESET Smart Security versions 5.0 through 7.0, update the Firewall Module to a version later than Build 1183. For ESET Endpoint Security versions 5.0 through 7.0, update the Firewall Module to a version later than Build 1183.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-4973

Affected Products

Eset Endpoint Security

Eset Personal Firewall

Eset Smart Security

References · 3

• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4973 · Security Note
• http://seclists.org/fulldisclosure/2014/Aug/52 · Note