Eset vulnerabilities, page 3
45 vulnerabilities
Known vulnerabilities in Eset products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 43 products.
CVE-2019-17549esetcyber_security
EPSS score1.21%
ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes. An attacker can abuse this bug to stop the protection from ESET and launch his attack.CVE-2023-2847esetcyber_security+2EPSS score0.15%
During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges.
ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.CVE-2023-7043eset, spol. s r.o.eset endpoint antivirus+11EPSS score0.28%
Unquoted service path in ESET products allows to
drop a prepared program to a specific location and run on boot with the
NT AUTHORITY\NetworkService permissions.CVE-2023-5594esetendpoint_antivirus+8EPSS score0.38%
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.CVE-2023-3160esetendpoint_antivirus+7EPSS score0.18%
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.