Vulnerability CVE-2020-11446


Published: 2020-04-29

Description:
ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.

Type:

CWE-269

(Improper Privilege Management)

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
ESET -> Antivirus and antispyware 
ESET -> Endpoint antivirus 
ESET -> Endpoint security 
ESET -> File security 
ESET -> Internet security 
ESET -> Mail security 
ESET -> Nod32 antivirus 
ESET -> Smart security 

 References:
https://support.eset.com/en/ca7489-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows

Copyright 2021, cxsecurity.com

 

Back to Top