CVE-2023-7043
Unquoted path privilege vulnerability in ESET products for Windows
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.
La ruta de servicio sin comillas en los productos ESET permite colocar un programa preparado en una ubicación específica y ejecutarlo al arrancar con los permisos NT AUTHORITY\NetworkService.
Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-12-21 CVE Reserved
- 2024-01-31 CVE Published
- 2024-10-17 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-428: Unquoted Search Path or Element
CAPEC
- CAPEC-233: Privilege Escalation
References (1)
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Eset Search vendor "Eset" | Endpoint Antivirus Search vendor "Eset" for product "Endpoint Antivirus" | >= 10.1.2046.0 < 11.0.2032.0 Search vendor "Eset" for product "Endpoint Antivirus" and version " >= 10.1.2046.0 < 11.0.2032.0" | - |
Affected
| ||||||
| Eset Search vendor "Eset" | Endpoint Security Search vendor "Eset" for product "Endpoint Security" | >= 10.1.2046.0 < 11.0.2032.0 Search vendor "Eset" for product "Endpoint Security" and version " >= 10.1.2046.0 < 11.0.2032.0" | - |
Affected
| ||||||
| Eset Search vendor "Eset" | Internet Security Search vendor "Eset" for product "Internet Security" | >= 16.1.14.0 < 17.0.15.0 Search vendor "Eset" for product "Internet Security" and version " >= 16.1.14.0 < 17.0.15.0" | - |
Affected
| ||||||
| Eset Search vendor "Eset" | Mail Security Search vendor "Eset" for product "Mail Security" | 10.1.10012.0 Search vendor "Eset" for product "Mail Security" and version "10.1.10012.0" | exchange_server |
Affected
| ||||||
| Eset Search vendor "Eset" | Nod32 Antivirus Search vendor "Eset" for product "Nod32 Antivirus" | >= 16.1.14.0 < 17.0.15.0 Search vendor "Eset" for product "Nod32 Antivirus" and version " >= 16.1.14.0 < 17.0.15.0" | - |
Affected
| ||||||
| Eset Search vendor "Eset" | Smart Security Premium Search vendor "Eset" for product "Smart Security Premium" | >= 16.1.14.0 < 17.0.15.0 Search vendor "Eset" for product "Smart Security Premium" and version " >= 16.1.14.0 < 17.0.15.0" | - |
Affected
| ||||||