CVE-2024-7400
The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.
- Score
- CVSS 4.0 8.5 High
- Status
- Deferred - security@eset.com
- Published
- 2024-09-27
- Last modified
- 2024-09-27
- Weaknesses
- CWE-1386
Affected products
- Endpoint Antivirus (Eset)
- Endpoint Security (Eset)
- File Security (Eset)
- Internet Security (Eset)
- Mail Security (Eset)
- Nod32 Antivirus (Eset)
- Safe Server (Eset)
- Security (Eset)
- Security Ultimate (Eset)
- Server Security (Eset)
- Small Business Security (Eset)
- Smart Security (Eset)
- Eset Endpoint Antivirus (Eset Spol. S R.o.)
- Eset Endpoint Security For Windows (Eset Spol. S R.o.)
- Eset File Security For Microsoft Azure (Eset Spol. S R.o.)
- Eset Internet Security (Eset Spol. S R.o.)
- Eset Mail Security For Ibm Domino (Eset Spol. S R.o.)
- Eset Mail Security For Microsoft Exchange Server (Eset Spol. S R.o.)
- Eset Nod32 Antivirus (Eset Spol. S R.o.)
- Eset Safe Server (Eset Spol. S R.o.)
- Eset Security For Microsoft Sharepoint Server (Eset Spol. S R.o.)
- Eset Security Ultimate (Eset Spol. S R.o.)
- Eset Server Security For Windows Server (Eset Spol. S R.o.)
- Eset Small Business Security (Eset Spol. S R.o.)
- Eset Smart Security Premium (Eset Spol. S R.o.)
References
- https://support.eset.com/en/ca8726-local-privilege-escalation-fixed-for-vulnerability-during-detected-file-removal-in-e…
