CVE-2024-7400

published 2024-09-27

CVE-2024-7400: The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to…

Priority P3 38 high 8.5 CVSS 4.0

AV L AC L AT N PR L UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.

Affected

19 ranges

Vendor	Product	Version range	Fixed in
eset_spol_s_r.o	eset_endpoint_antivirus	<= 1250	—
eset_spol_s_r.o	eset_endpoint_security_for_windows	<= 1250	—
eset_spol_s_r.o	eset_file_security_for_microsoft_azure	<= 1250	—
eset_spol_s_r.o	eset_internet_security	<= 1250	—
eset_spol_s_r.o	eset_mail_security_for_ibm_domino	<= 1250	—
eset_spol_s_r.o	eset_mail_security_for_microsoft_exchange_server	<= 1250	—
eset_spol_s_r.o	eset_nod32_antivirus	<= 1250	—
eset_spol_s_r.o	eset_safe_server	<= 1250	—
eset_spol_s_r.o	eset_security_for_microsoft_sharepoint_server	<= 1250	—
eset_spol_s_r.o	eset_security_ultimate	<= 1250	—
eset_spol_s_r.o	eset_server_security_for_windows_server	<= 1250	—
eset_spol_s_r.o	eset_small_business_security	<= 1250	—
eset_spol_s_r.o	eset_smart_security_premium	<= 1250	—
linux	linux_kernel	>= 0 < 5.4.287	5.4.287
linux	linux_kernel	>= 5.11.0 < 5.15.174	5.15.174
linux	linux_kernel	>= 5.16.0 < 6.1.120	6.1.120
linux	linux_kernel	>= 5.5.0 < 5.10.231	5.10.231
linux	linux_kernel	>= 6.2.0 < 6.6.66	6.6.66
linux	linux_kernel	>= 6.7.0 < 6.12.5	6.12.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-1386