6.9
CVE-2014-4973
- EPSS 0.06%
- Veröffentlicht 23.09.2014 15:55:06
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eset ≫ Smart Security Version5.0.94
Eset ≫ Smart Security Version5.0.95
Eset ≫ Smart Security Version5.2.9
Eset ≫ Smart Security Version5.2.15
Eset ≫ Smart Security Version6.0.306
Eset ≫ Smart Security Version6.0.308
Eset ≫ Smart Security Version6.0.314
Eset ≫ Smart Security Version6.0.316
Eset ≫ Endpoint Security Version5.0.2113
Eset ≫ Endpoint Security Version5.0.2122
Eset ≫ Endpoint Security Version5.0.2126
Eset ≫ Endpoint Security Version5.0.2214
Eset ≫ Endpoint Security Version5.0.2225
Eset ≫ Endpoint Security Version5.0.2228
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.162 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.9 | 3.4 | 10 |
AV:L/AC:M/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.