← Back

CVE-2023-2847

nvd nist
Published: Jun 15, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.

Affected (8)

Eset
3 products
Cyber Security
Endpoint Antivirus
Server Security
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Cyber Security
From 7.3.0 to 7.3.3700.0
Eset
Endpoint Antivirus
Before 8.1.12.0
Endpoint Antivirus
From 9.0.5.0 to 9.0.10.0
Endpoint Antivirus
From 9.1.4.0 to 9.1.11.0
Endpoint Antivirus
From 7.0.0 to 7.3.3600.0
Eset
Server Security
Before 8.1.823.0
Server Security
From 9.0.464.0 to 9.0.466.0
Server Security
From 9.1.96.0 to 9.1.98.0

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: security@eset.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.