Lucene search

[email protected]CVE-2023-3160

HistoryAug 14, 2023 - 10:15 a.m.

CVE-2023-3160

2023-08-1410:15:09

CWE-269

[email protected]

web.nvd.nist.gov

cve-2023-3160

eset

vulnerability

file operations

unauthorized access

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

JSON

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.

Affected configurations

NVD

Node

esetendpoint_antivirusMatch--

esetendpoint_securityMatch-

esetinternet_securityMatch-

esetmail_securityMatch-domino

esetmail_securityMatch-exchange_server

esetnod32Match-

esetsecurityMatch-sharepoint_server

esetserver_securityMatch-windows_server

esetsmart_securityMatch-premium

CPENameOperatorVersion
eset:endpoint_antiviruseset endpoint antiviruseq-
eset:endpoint_securityeset endpoint securityeq-
eset:internet_securityeset internet securityeq-
eset:mail_securityeset mail securityeq-
eset:nod32eset nod32eq-
eset:securityeset securityeq-
eset:server_securityeset server securityeq-
eset:smart_securityeset smart securityeq-

CPE	Name	Operator	Version
eset:endpoint_antivirus	eset endpoint antivirus	eq	-
eset:endpoint_security	eset endpoint security	eq	-
eset:internet_security	eset internet security	eq	-
eset:mail_security	eset mail security	eq	-
eset:nod32	eset nod32	eq	-
eset:security	eset security	eq	-
eset:server_security	eset server security	eq	-
eset:smart_security	eset smart security	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET NOD32 Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Internet Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Smart Security Premium",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Endpoint Antivirus",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Endpoint Security",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Server Security for Windows Server (File Security)",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Mail Security for IBM Domino",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HIPS"
    ],
    "product": "ESET Security for Microsoft SharePoint Server",
    "vendor": "ESET, spol. s r.o.",
    "versions": [
      {
        "status": "unaffected",
        "version": "1463"
      }
    ]
  }
]

References

support.eset.com/en/ca8466

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

JSON

Related for CVE-2023-3160

zdi1 cvelist1 prion1 nvd1