CVE-2014-4973

Published: Sep 23, 2014Modified: May 6, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.

Affected (14)

Products: Eset: Smart Security, Endpoint Security

Eset

2 products

Smart Security

Endpoint Security

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Eset Smart Security	Version 5.0.94
Eset Smart Security	Version 5.0.95
Eset Smart Security	Version 5.2.15
Eset Smart Security	Version 5.2.9
Eset Smart Security	Version 6.0.306
Eset Smart Security	Version 6.0.308
Eset Smart Security	Version 6.0.314
Eset Smart Security	Version 6.0.316

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Eset Endpoint Security	Version 5.0.2113
Eset Endpoint Security	Version 5.0.2122
Eset Endpoint Security	Version 5.0.2126
Eset Endpoint Security	Version 5.0.2214
Eset Endpoint Security	Version 5.0.2225
Eset Endpoint Security	Version 5.0.2228

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://seclists.org/fulldisclosure/2014/Aug/52

Source: cve@mitre.org

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2014/Aug/52

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.