{"id":"CVE-2024-3779","state":"PUBLISHED","title":"Denial of Service in ESET products for Windows","description":"Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.","publishedAt":"2024-07-16T08:17:59.962Z","updatedAt":"2024-08-01T20:20:01.654Z","severity":{"score":6.1,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","source":"ESET"},"assigner":"ESET","products":["ESET s.r.o ESET NOD32 Antivirus","ESET s.r.o ESET Internet Security","ESET s.r.o ESET Smart Security Premium","ESET s.r.o ESET Security Ultimate","ESET s.r.o ESET Endpoint Antivirus for Windows","ESET s.r.o ESET Endpoint Security for Windows","ESET s.r.o ESET Server Security for Windows Server","ESET s.r.o ESET Mail Security for Microsoft Exchange Server","ESET s.r.o ESET Mail Security for IBM Domino","ESET s.r.o ESET Security for Microsoft SharePoint Server"],"affected":[{"vendor":"ESET s.r.o","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Endpoint Antivirus for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.2044.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.2044.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Server Security for Windows Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.12011.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Mail Security for Microsoft Exchange Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.10005.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Mail Security for IBM Domino","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Security for Microsoft SharePoint Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.15002.0","versionType":"custom"}]}],"references":["https://support.eset.com/en/ca8688"],"weaknesses":["CWE-276"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/3xxx/CVE-2024-3779.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-3779","state":"PUBLISHED","datePublished":"2024-07-16T08:17:59.962Z","dateUpdated":"2024-08-01T20:20:01.654Z","assignerShortName":"ESET","assignerOrgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateReserved":"2024-04-15T07:03:57.841Z"},"containers":{"cna":{"title":"Denial of Service in ESET products for Windows","descriptions":[{"lang":"en","value":"Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met."}],"affected":[{"vendor":"ESET s.r.o","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"17.1.13.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Endpoint Antivirus for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.2044.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.2044.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Server Security for Windows Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.12011.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Mail Security for Microsoft Exchange Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.10005.0","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Mail Security for IBM Domino","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","versionType":"custom"}]},{"vendor":"ESET s.r.o","product":"ESET Security for Microsoft SharePoint Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"11.0.15002.0","versionType":"custom"}]}],"references":[{"url":"https://support.eset.com/en/ca8688"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-276","description":"CWE-276 Incorrect Default Permissions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ESET","orgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateUpdated":"2024-07-16T08:17:59.962Z"},"datePublic":"2024-07-12T10:00:00.000Z","impacts":[{"capecId":"CAPEC-578","descriptions":[{"lang":"en","value":"CAPEC-578 Disable Security Software"}]}],"source":{"advisory":"ca8688","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-16T13:10:29.360811Z","id":"CVE-2024-3779","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-16T13:10:35.421Z"}},{"title":"CVE Program Container","references":[{"url":"https://support.eset.com/en/ca8688","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T20:20:01.654Z"}}]}}}