CVE-2024-0353

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 81.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
19
Eset Endpoint AntivirusEset Endpoint SecurityEset Internet Security+16 more
Timeline
PublishedFeb 15

Description

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages19 packages

▶NVDeset/security8.0 — 8.0.15012.0+4
▶NVDeset/mail_security8.0 — 8.0.10024.0+8
▶NVDeset/smart_security< 17.0.10.0
▶NVDeset/nod32_antivirus< 17.0.10.0

🔴Vulnerability Details

2
CVEList
Local privilege escalation in Windows products↗2024-02-15
▶
GHSA
GHSA-8m6h-q36w-xvg7: Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permis↗2024-02-15
▶
CVE-2024-0353 (HIGH CVSS 7.8) | Local privilege escalation vulnerab | cvebase.io