CVE-2020-11446
High
Description
ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.
SeverityHigh
CVSS7.8
Exploit probability—
ProductEset Antivirus And Antispyware
PublishedApr 29, 2020
First seenApr 29, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset antivirus_and_antispyware | 1553 ≤ v ≤ 1560 | — |
| eset endpoint_antivirus | No range specified | — |
| eset endpoint_security | No range specified | — |
| eset file_security | No range specified | — |
| eset internet_security | No range specified | — |
| eset mail_security | No range specified | — |
| eset nod32_antivirus | No range specified | — |
| eset smart_security | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.