CVE-2024-7400 — Local privilege escalation in ESET products for Windows

Description (CNA)

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.

Affected (CNA)

Vendor / product	Versions
ESET, spol. s r.o. / ESET NOD32 Antivirus	affected 0 through 1250
ESET, spol. s r.o. / ESET Internet Security	affected 0 through 1250
ESET, spol. s r.o. / ESET Smart Security Premium	affected 0 through 1250
ESET, spol. s r.o. / ESET Security Ultimate	affected 0 through 1250
ESET, spol. s r.o. / ESET Small Business Security	affected 0 through 1250
ESET, spol. s r.o. / ESET Safe Server	affected 0 through 1250
ESET, spol. s r.o. / ESET Endpoint Antivirus	affected 0 through 1250
ESET, spol. s r.o. / ESET Endpoint Security for Windows	affected 0 through 1250
ESET, spol. s r.o. / ESET Server Security for Windows Server	affected 0 through 1250
ESET, spol. s r.o. / ESET Mail Security for Microsoft Exchange Server	affected 0 through 1250
ESET, spol. s r.o. / ESET Mail Security for IBM Domino	affected 0 through 1250
ESET, spol. s r.o. / ESET Security for Microsoft SharePoint Server	affected 0 through 1250
ESET, spol. s r.o. / ESET File Security for Microsoft Azure	affected 0 through 1250

CWE

CWE-1386

References

https://support.eset.com/en/ca8726-local-privilege-escalation-fixed-for-vulnerability-during-detected-file-removal-in-eset-products-for-windows

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.