CVE-2023-7043 — Unquoted path privilege vulnerability in ESET products for Windows

Description (CNA)

Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.

Affected (CNA)

Vendor / product	Versions
ESET, spol. s r.o. / ESET Endpoint Security	affected 10.1.2046.x through 10.1.2063.x
ESET, spol. s r.o. / ESET Endpoint Antivirus	affected 10.1.2046.x through 10.1.2063.x
ESET, spol. s r.o. / ESET NOD32 Antivirus	affected 16.1.14.0 through 16.2.15.0
ESET, spol. s r.o. / ESET Internet Security	affected 16.1.14.0 through 16.2.15.0
ESET, spol. s r.o. / ESET Smart Security Premium	affected 16.1.14.0 through 16.2.15.0
ESET, spol. s r.o. / ESET Mail Security for Microsoft Exchange Server	affected 10.1.10012.0

CWE

CWE-428

References

https://support.eset.com/en/ca8602

ADP enrichment

CVE

No English description supplied.

https://support.eset.com/en/ca8602

CISA-ADP

No English description supplied.

No references supplied.