PT-2023-3648 · Eset · Eset Endpoint Antivirus+2

Published 2023-06-14 · Updated 2023-07-05 · CVE-2023-2847

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ESET Server Security (affected versions not specified) ESET Endpoint Antivirus (affected versions not specified) ESET Cyber Security (affected versions not specified) ESET Endpoint Antivirus (affected versions not specified)

Description A local privilege escalation issue has been identified due to improper privilege management. This allows a user with lower privileges to trigger actions with root privileges. ESET has prepared new builds of its products that are no longer susceptible to this issue.

Recommendations For ESET Server Security, update to a newer version that includes the fix for this issue. For ESET Endpoint Antivirus, update to a newer version that includes the fix for this issue. For ESET Cyber Security, update to a newer version that includes the fix for this issue. For ESET Endpoint Antivirus, update to a newer version that includes the fix for this issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2023-03932

CVE-2023-2847

Affected Products

Eset Cyber Security

Eset Endpoint Antivirus

Eset Server Security

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-2847 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2847 · Vendor Advisory
• https://support.eset.com/en/ca8447 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03932 · Security Note
• https://t.me/pentestingnews/36919 · Telegram Post
• https://t.me/cibsecurity/65259 · Telegram Post
• https://vuldb.com/ru/?id.231621 · Note
• https://support.eset.com/en/ca8447-local-privilege-escalation-vulnerability-in-eset-products-for-linux-and-macos-fixed · Note
• https://t.me/cvenotify/52385 · Telegram Post