CVE-2019-16519

Published: Oct 14, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks.

Affected (4)

Products: Eset: Cyber Security, Endpoint Antivirus, Endpoint Security

3 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Eset Cyber Security	Up to 6.7.900.0
Eset Cyber Security	Up to 6.7.900.0
Eset Endpoint Antivirus	Up to 6.7.900.0
Eset Endpoint Security	Up to 6.7.900.0

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

http://support.eset.com/ca7317/

Source: cve@mitre.org

Vendor Advisory

https://danishcyberdefence.dk/blog/esets-cyber-security

Source: cve@mitre.org

Broken Link

http://support.eset.com/ca7317/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://danishcyberdefence.dk/blog/esets-cyber-security

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.