7.8

CVE-2024-0353

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.

Data is provided by the National Vulnerability Database (NVD)
Eset ≫ Endpoint Antivirus SwPlatformwindows Version < 8.1.2062.0
Eset ≫ Endpoint Antivirus SwPlatformwindows Version >= 9.0 < 9.1.2071.0
Eset ≫ Endpoint Antivirus SwPlatformwindows Version >= 10.0 < 10.0.2052.0
Eset ≫ Endpoint Antivirus SwPlatformwindows Version >= 10.1 < 10.1.2063.0
Eset ≫ Endpoint Antivirus SwPlatformwindows Version >= 11.0 < 11.0.2032.0
Eset ≫ Endpoint Security SwPlatformwindows Version < 8.1.2062.0
Eset ≫ Endpoint Security SwPlatformwindows Version >= 9.0 < 9.1.2071.0
Eset ≫ Endpoint Security SwPlatformwindows Version >= 10.0 < 10.0.2052.0
Eset ≫ Endpoint Security SwPlatformwindows Version >= 10.1 < 10.1.2063.0
Eset ≫ Endpoint Security SwPlatformwindows Version >= 11.0 < 11.0.2032.0
Eset ≫ File Security SwPlatformazure
Eset ≫ Internet Security Version < 17.0.10.0
Eset ≫ Mail Security SwPlatformexchange_server Version < 7.3.10018.0
Eset ≫ Mail Security SwPlatformdomino Version < 7.3.14006.0
Eset ≫ Mail Security SwPlatformexchange_server Version >= 8.0 < 8.0.10024.0
Eset ≫ Mail Security SwPlatformdomino Version >= 8.0 < 8.0.14014.0
Eset ≫ Mail Security SwPlatformexchange_server Version >= 9.0 < 9.0.10012.0
Eset ≫ Mail Security SwPlatformdomino Version >= 9.0 < 9.0.14008.0
Eset ≫ Mail Security SwPlatformexchange_server Version >= 10.0 < 10.0.10018.0
Eset ≫ Mail Security SwPlatformdomino Version >= 10.0 < 10.0.14007.0
Eset ≫ Mail Security SwPlatformexchange_server Version >= 10.1 < 10.1.10014.0
Eset ≫ Nod32 Antivirus Version < 17.0.10.0
Eset ≫ Security SwPlatformsharepoint_server Version < 7.3.15006.0
Eset ≫ Security SwEditionultimate Version < 17.0.10.0
Eset ≫ Security SwPlatformsharepoint_server Version >= 8.0 < 8.0.15012.0
Eset ≫ Security SwPlatformsharepoint_server Version >= 9.0 < 9.0.15006.0
Eset ≫ Security SwPlatformsharepoint_server Version >= 10.0 < 10.0.15005.0
Eset ≫ Server Security SwPlatformwindows_server Version < 7.3.12013.0
Eset ≫ Server Security SwPlatformwindows_server Version >= 8.0 < 8.0.12016.0
Eset ≫ Server Security SwPlatformwindows_server Version >= 9.0 < 9.0.12019.0
Eset ≫ Server Security SwPlatformwindows_server Version >= 10.0 < 10.0.12015.0
Eset ≫ Smart Security SwEditionpremium Version < 17.0.10.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.287
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security@eset.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.