Lucene search

[email protected]CVE-2014-4973

HistorySep 23, 2014 - 3:55 p.m.

CVE-2014-4973

2014-09-2315:55:06

CWE-20

[email protected]

web.nvd.nist.gov

eset

personal firewall

ndis filter

epfwndis.sys

firewall module

smart security

endpoint security

cve-2014-4973

nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.

Affected configurations

NVD

Node

esetsmart_securityMatch5.0.94

esetsmart_securityMatch5.0.95

esetsmart_securityMatch5.2.9

esetsmart_securityMatch5.2.15

esetsmart_securityMatch6.0.306

esetsmart_securityMatch6.0.308

esetsmart_securityMatch6.0.314

esetsmart_securityMatch6.0.316

Node

esetendpoint_securityMatch5.0.2113

esetendpoint_securityMatch5.0.2122

esetendpoint_securityMatch5.0.2126

esetendpoint_securityMatch5.0.2214

esetendpoint_securityMatch5.0.2225

esetendpoint_securityMatch5.0.2228

CPENameOperatorVersion
eset:smart_securityeset smart securityeq5.0.94
eset:smart_securityeset smart securityeq5.0.95
eset:smart_securityeset smart securityeq5.2.9
eset:smart_securityeset smart securityeq5.2.15
eset:smart_securityeset smart securityeq6.0.306
eset:smart_securityeset smart securityeq6.0.308
eset:smart_securityeset smart securityeq6.0.314
eset:smart_securityeset smart securityeq6.0.316

CPE	Name	Operator	Version
eset:smart_security	eset smart security	eq	5.0.94
eset:smart_security	eset smart security	eq	5.0.95
eset:smart_security	eset smart security	eq	5.2.9
eset:smart_security	eset smart security	eq	5.2.15
eset:smart_security	eset smart security	eq	6.0.306
eset:smart_security	eset smart security	eq	6.0.308
eset:smart_security	eset smart security	eq	6.0.314
eset:smart_security	eset smart security	eq	6.0.316