CVE-2023-2847CWE-269

Local privilege escalation in ESET products for Linux and MacOS

High · published June 15, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges.

ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-06-15T07:46Z
EPSS history
Timeline
  • 15 JUN 07:46Z
    Local privilege escalation in ESET products for Linux and MacOS
    cvelistv5