Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2023-7043

Unquoted path privilege vulnerability in ESET products for Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ESET

Description

Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ESET, spol. s r.o. ESET Endpoint Security

Default version status: unaffected

  • 10.1.2046.x to ≤ 10.1.2063.xaffected

ESET, spol. s r.o. ESET Endpoint Antivirus

Default version status: unaffected

  • 10.1.2046.x to ≤ 10.1.2063.xaffected

ESET, spol. s r.o. ESET NOD32 Antivirus

Default version status: unaffected

  • 16.1.14.0 to ≤ 16.2.15.0affected

ESET, spol. s r.o. ESET Internet Security

Default version status: unaffected

  • 16.1.14.0 to ≤ 16.2.15.0affected

ESET, spol. s r.o. ESET Smart Security Premium

Default version status: unaffected

  • 16.1.14.0 to ≤ 16.2.15.0affected

ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server

Default version status: unaffected

  • 10.1.10012.0affected

References