Unquoted path privilege vulnerability in ESET products for Windows
Unquoted service path in ESET products allows to
drop a prepared program to a specific location and run on boot with the
NT AUTHORITY\NetworkService permissions.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ESET Endpoint Security
Vendor
ESET, spol. s r.o.
Product
ESET Endpoint Security
Platforms
Unknown
Default status
unaffected
ESET Endpoint Security · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.1.2046.x
affected
custom
Unavailable
10.1.2063.x
None listed
ESET Endpoint Antivirus
Vendor
ESET, spol. s r.o.
Product
ESET Endpoint Antivirus
Platforms
Unknown
Default status
unaffected
ESET Endpoint Antivirus · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.1.2046.x
affected
custom
Unavailable
10.1.2063.x
None listed
ESET NOD32 Antivirus
Vendor
ESET, spol. s r.o.
Product
ESET NOD32 Antivirus
Platforms
Unknown
Default status
unaffected
ESET NOD32 Antivirus · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
16.1.14.0
affected
custom
Unavailable
16.2.15.0
None listed
ESET Internet Security
Vendor
ESET, spol. s r.o.
Product
ESET Internet Security
Platforms
Unknown
Default status
unaffected
ESET Internet Security · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
16.1.14.0
affected
custom
Unavailable
16.2.15.0
None listed
ESET Smart Security Premium
Vendor
ESET, spol. s r.o.
Product
ESET Smart Security Premium
Platforms
Unknown
Default status
unaffected
ESET Smart Security Premium · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
16.1.14.0
affected
custom
Unavailable
16.2.15.0
None listed
ESET Mail Security for Microsoft Exchange Server
Vendor
ESET, spol. s r.o.
Product
ESET Mail Security for Microsoft Exchange Server
Platforms
Unknown
Default status
unaffected
ESET Mail Security for Microsoft Exchange Server · Scoped product and version facts