CVE-2024-3779

Published: Jul 16, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.

Affected (10)

Products: Eset: Internet Security, Nod32, Security, Smart Security, Endpoint Antivirus, Endpoint Security, Server Security, Mail Security

8 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Eset Internet Security	Before 17.2.7.0
Eset Nod32	Before 17.2.7.0
Eset Security	Before 17.2.7.0
Eset Smart Security	Before 17.2.7.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Eset Endpoint Antivirus	Before 11.1.2039.0
Eset Endpoint Security	Before 11.1.2039.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Eset Server Security	Before 11.0.12012.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Eset Mail Security	Up to 11.0.10008.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Eset Mail Security	All versions

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Eset Security	Before 11.0.15004.0

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://support.eset.com/en/ca8688

Source: security@eset.com

Vendor Advisory

https://support.eset.com/en/ca8688

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.