CVE-2023-3160 - OpenCVE

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Eset	Endpoint Antivirus Endpoint Security Internet Security Mail Security Nod32 Security Server Security Smart Security

Configuration 1 [-]

OR	cpe:2.3:a:eset:endpoint_antivirus:-:::::-::
	cpe:2.3:a:eset:endpoint_security:-:::::::*
	cpe:2.3:a:eset:internet_security:-:::::::*
	cpe:2.3:a:eset:mail_security:-:::::domino::
	cpe:2.3:a:eset:mail_security:-:::::exchange_server::
	cpe:2.3:a:eset:nod32:-:::::::*
	cpe:2.3:a:eset:security:-:::::sharepoint_server::
	cpe:2.3:a:eset:server_security:-:::::windows_server::
	cpe:2.3:a:eset:smart_security:-::::premium:::

No data.

References

Link	Providers
https://support.eset.com/en/ca8466

History

No history.

MITRE

Status: PUBLISHED

Assigner: ESET

Published: 2023-08-14T09:27:02.427Z

Updated: 2024-08-02T06:48:07.675Z

Reserved: 2023-06-08T08:28:28.513Z

Link: CVE-2023-3160

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-08-14T10:15:09.503

Modified: 2023-08-21T16:03:22.640

Link: CVE-2023-3160

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-3160", "assignerOrgId": "4a9b9929-2450-4021-b7b9-469a0255b215", "state": "PUBLISHED", "assignerShortName": "ESET", "dateReserved": "2023-06-08T08:28:28.513Z", "datePublished": "2023-08-14T09:27:02.427Z", "dateUpdated": "2024-08-02T06:48:07.675Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET NOD32 Antivirus", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Internet Security", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Smart Security Premium", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Endpoint Antivirus", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Endpoint Security", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Server Security for Windows Server (File Security)", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Mail Security for Microsoft Exchange Server", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Mail Security for IBM Domino", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}, {"defaultStatus": "unaffected", "modules": ["HIPS"], "product": "ESET Security for Microsoft SharePoint Server", "vendor": "ESET, spol. s r.o.", "versions": [{"status": "unaffected", "version": "1463"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\nThe vulnerability potentially allows an attacker to misuse ESET\u2019s file operations during the module update to delete or move files without having proper permissions."}], "value": "\nThe vulnerability potentially allows an attacker to misuse ESET\u2019s file operations during the module update to delete or move files without having proper permissions."}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "4a9b9929-2450-4021-b7b9-469a0255b215", "shortName": "ESET", "dateUpdated": "2023-08-14T09:27:02.427Z"}, "references": [{"url": "https://support.eset.com/en/ca8466"}], "source": {"advisory": "ca8466", "discovery": "EXTERNAL"}, "title": "Local privilege escalation in security products for Windows", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:48:07.675Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.eset.com/en/ca8466", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset:endpoint_antivirus:-:*:*:*:*:-:*:*", "matchCriteriaId": "2B76C798-A8F7-4705-B85A-98CE4C44AC53", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:endpoint_security:-:*:*:*:*:*:*:*", "matchCriteriaId": "81593DEE-54D7-49D5-9AE6-20B7E2B0AF8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:internet_security:-:*:*:*:*:*:*:*", "matchCriteriaId": "F2CAD248-1F32-4459-A530-8706E334C67F", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:*", "matchCriteriaId": "5043B5B1-38B2-4621-B738-A79E5DF8D98E", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:mail_security:-:*:*:*:*:exchange_server:*:*", "matchCriteriaId": "DE40A56E-EBC0-43C8-85FB-868802B4817F", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:nod32:-:*:*:*:*:*:*:*", "matchCriteriaId": "82540E3B-B426-424F-A6FD-C0AAB596389A", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:security:-:*:*:*:*:sharepoint_server:*:*", "matchCriteriaId": "D6CCDFB5-D27D-40F5-9BFC-274DA84783E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:server_security:-:*:*:*:*:windows_server:*:*", "matchCriteriaId": "74BC745B-A4C5-4EAE-B985-78FDA3C40516", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:smart_security:-:*:*:*:premium:*:*:*", "matchCriteriaId": "375F46B4-9FDF-48FB-935A-8BB6FEF5221A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "\nThe vulnerability potentially allows an attacker to misuse ESET\u2019s file operations during the module update to delete or move files without having proper permissions."}], "id": "CVE-2023-3160", "lastModified": "2023-08-21T16:03:22.640", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security@eset.com", "type": "Secondary"}]}, "published": "2023-08-14T10:15:09.503", "references": [{"source": "security@eset.com", "tags": ["Vendor Advisory"], "url": "https://support.eset.com/en/ca8466"}], "sourceIdentifier": "security@eset.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-269"}], "source": "security@eset.com", "type": "Secondary"}]}