CVE-2023-5594

Published: Dec 21, 2023Modified: Jun 17, 2026

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Affected (13)

Products: Eset: Endpoint Antivirus, Endpoint Security, File Security, Internet Security, Mail Security, Nod32 Antivirus, Security, Server Security, Smart Security

9 products

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Eset Endpoint Antivirus	From 10.0
Eset Endpoint Antivirus	All versions
Eset Endpoint Security	All versions
Eset File Security	All versions
Eset Internet Security	All versions
Eset Mail Security	All versions
Eset Mail Security	All versions
Eset Nod32 Antivirus	All versions
Eset Security	All versions
Eset Security	All versions
Eset Server Security	From 10.1
Eset Server Security	All versions
Eset Smart Security	All versions

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed

Source: security@eset.com

Vendor Advisory

https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.