Log in Start free

Vulnerability · Published Jun 15, 2023 · Assigned by ESET

CVE-2023-2847Local privilege escalation in ESET products for Linux and MacOS

High 7.8

In plain English

A high-severity privilege mismanagement in Cyber Security from ESET . There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.

Affected products (as reported)

VendorProductVersions
ESET Server Security for Linux see references
ESET Endpoint Antivirus for Linux see references
ESET Cyber Security see references
ESET Endpoint Antivirus for macOS see references

Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References