CVE-2020-11446

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.

Los módulos 1553 hasta 1560 de ESET Antivirus y Antispyware Module, permite a un usuario con derechos de acceso limitados crear enlaces físicos en algunos directorios de ESET y luego forzar al producto a escribir por medio de estos enlaces en archivos que normalmente no podrían ser escritos por el usuario, logrando así una escalada de privilegios.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-04-01 CVE Reserved
2020-04-29 CVE Published
2023-03-08 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-59: Improper Link Resolution Before File Access ('Link Following')

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://support.eset.com/en/ca7489-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows	2021-07-21

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Eset Search vendor "Eset"		Antivirus And Antispyware Search vendor "Eset" for product "Antivirus And Antispyware"				>= 1553 <= 1560 Search vendor "Eset" for product "Antivirus And Antispyware" and version " >= 1553 <= 1560"		-		Affected
Eset Search vendor "Eset"		Endpoint Antivirus Search vendor "Eset" for product "Endpoint Antivirus"				-		-		Affected
Eset Search vendor "Eset"		Endpoint Security Search vendor "Eset" for product "Endpoint Security"				-		-		Affected
Eset Search vendor "Eset"		File Security Search vendor "Eset" for product "File Security"				-		windows_server		Affected
Eset Search vendor "Eset"		Internet Security Search vendor "Eset" for product "Internet Security"				-		-		Affected
Eset Search vendor "Eset"		Mail Security Search vendor "Eset" for product "Mail Security"				-		domino		Affected
Eset Search vendor "Eset"		Mail Security Search vendor "Eset" for product "Mail Security"				-		exchange_server		Affected
Eset Search vendor "Eset"		Mail Security Search vendor "Eset" for product "Mail Security"				-		kerio		Affected
Eset Search vendor "Eset"		Mail Security Search vendor "Eset" for product "Mail Security"				-		sharepoint_server		Affected
Eset Search vendor "Eset"		Nod32 Antivirus Search vendor "Eset" for product "Nod32 Antivirus"				-		-		Affected
Eset Search vendor "Eset"		Nod32 Antivirus Search vendor "Eset" for product "Nod32 Antivirus"				-		business		Affected
Eset Search vendor "Eset"		Smart Security Search vendor "Eset" for product "Smart Security"				-		-		Affected
Eset Search vendor "Eset"		Smart Security Search vendor "Eset" for product "Smart Security"				-		business		Affected
Eset Search vendor "Eset"		Smart Security Search vendor "Eset" for product "Smart Security"				-		premium		Affected