Vulnerability · Published Jun 21, 2024 · Assigned by ESET
CVE-2024-2003Local Privilege Escalation in Quarantine of ESET products for Windows
High 7.3
In plain English
A high-severity privilege mismanagement in ESET Endpoint Antivirus for Windows from ESET, spol. s r.o.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.3%top 76.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Internet Security | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Smart Security Premium | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Security Ultimate | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Small Business Security | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Safe Server | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Endpoint Antivirus for Windows | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Endpoint Security for Windows | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Server Security for Windows Server | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Mail Security for IBM Domino | 0 – before 1610 |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | 0 – before 1610 |
| ESET, spol. s r.o. | ESET File Security for Microsoft Azure | 0 – before 1610 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H