CVE-2023-7043
Low
Description
Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.
SeverityLow
CVSS3.3
Exploit probability—
ProductEset Endpoint Antivirus
PublishedJan 31, 2024
First seenJan 31, 2024
Weakness typeCWE-428CWE-428
How to fix
Update
- eset endpoint_antivirus11.0.2032.0 or later
- eset endpoint_security11.0.2032.0 or later
- eset internet_security17.0.15.0 or later
- eset nod32_antivirus17.0.15.0 or later
- eset smart_security_premium17.0.15.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset endpoint_antivirus | 10.1.2046.0 ≤ v < 11.0.2032.0 | 11.0.2032.0 |
| eset endpoint_security | 10.1.2046.0 ≤ v < 11.0.2032.0 | 11.0.2032.0 |
| eset internet_security | 16.1.14.0 ≤ v < 17.0.15.0 | 17.0.15.0 |
| eset mail_security | 10.1.10012.0 | — |
| eset nod32_antivirus | 16.1.14.0 ≤ v < 17.0.15.0 | 17.0.15.0 |
| eset smart_security_premium | 16.1.14.0 ≤ v < 17.0.15.0 | 17.0.15.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.