CVE-2024-3779 - Vulnerability Details

Vendors	Products
Eset	Endpoint Antivirus Endpoint Security Internet Security Mail Security Nod32 Security Server Security Smart Security

Link	Providers
https://support.eset.com/en/ca8688

Type	Values Removed	Values Added
First Time appeared		Eset Eset endpoint Antivirus Eset endpoint Security Eset internet Security Eset mail Security Eset nod32 Eset security Eset server Security Eset smart Security
CPEs		cpe:2.3:a:eset:endpoint_antivirus::::::windows::* cpe:2.3:a:eset:endpoint_security::::::windows::* cpe:2.3:a:eset:internet_security:::::::: cpe:2.3:a:eset:mail_security::::::exchange_server::* cpe:2.3:a:eset:mail_security:-:::::domino:: cpe:2.3:a:eset:nod32:::::::: cpe:2.3:a:eset:security::::::sharepoint_server::* cpe:2.3:a:eset:security:::::ultimate:::* cpe:2.3:a:eset:server_security::::::windows_server::* cpe:2.3:a:eset:smart_security:::::premium:::*
Vendors & Products		Eset Eset endpoint Antivirus Eset endpoint Security Eset internet Security Eset mail Security Eset nod32 Eset security Eset server Security Eset smart Security

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-3779", "assignerOrgId": "4a9b9929-2450-4021-b7b9-469a0255b215", "state": "PUBLISHED", "assignerShortName": "ESET", "dateReserved": "2024-04-15T07:03:57.841Z", "datePublished": "2024-07-16T08:17:59.962Z", "dateUpdated": "2024-08-01T20:20:01.654Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "ESET NOD32 Antivirus", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "17.1.13.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Internet Security", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "17.1.13.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Smart Security Premium", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "17.1.13.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Security Ultimate", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "17.1.13.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Endpoint Antivirus for Windows", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "11.0.2044.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Endpoint Security for Windows", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "11.0.2044.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Server Security for Windows Server", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "11.0.12011.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Mail Security for Microsoft Exchange Server", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "11.0.10005.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Mail Security for IBM Domino", "vendor": "ESET s.r.o", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ESET Security for Microsoft SharePoint Server", "vendor": "ESET s.r.o", "versions": [{"lessThanOrEqual": "11.0.15002.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2024-07-12T10:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET\u2019s security product inoperable, provided non-default preconditions were met."}], "value": "Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET\u2019s security product inoperable, provided non-default preconditions were met."}], "impacts": [{"capecId": "CAPEC-578", "descriptions": [{"lang": "en", "value": "CAPEC-578 Disable Security Software"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "4a9b9929-2450-4021-b7b9-469a0255b215", "shortName": "ESET", "dateUpdated": "2024-07-16T08:17:59.962Z"}, "references": [{"url": "https://support.eset.com/en/ca8688"}], "source": {"advisory": "ca8688", "discovery": "UNKNOWN"}, "title": "Denial of Service in ESET products for Windows", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-16T13:10:29.360811Z", "id": "CVE-2024-3779", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-16T13:10:35.421Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:20:01.654Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.eset.com/en/ca8688", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-3779 (string)

assignerOrgId : 4a9b9929-2450-4021-b7b9-469a0255b215 (string)

state : PUBLISHED (string)

assignerShortName : ESET (string)

dateReserved : 2024-04-15T07:03:57.841Z (string)

datePublished : 2024-07-16T08:17:59.962Z (string)

dateUpdated : 2024-08-01T20:20:01.654Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : ESET NOD32 Antivirus (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 17.1.13.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

1 : { »

defaultStatus : unaffected (string)

product : ESET Internet Security (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 17.1.13.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

2 : { »

defaultStatus : unaffected (string)

product : ESET Smart Security Premium (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 17.1.13.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

3 : { »

defaultStatus : unaffected (string)

product : ESET Security Ultimate (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 17.1.13.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

4 : { »

defaultStatus : unaffected (string)

product : ESET Endpoint Antivirus for Windows (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 11.0.2044.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

5 : { »

defaultStatus : unaffected (string)

product : ESET Endpoint Security for Windows (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 11.0.2044.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

6 : { »

defaultStatus : unaffected (string)

product : ESET Server Security for Windows Server (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 11.0.12011.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

7 : { »

defaultStatus : unaffected (string)

product : ESET Mail Security for Microsoft Exchange Server (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 11.0.10005.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

8 : { »

defaultStatus : unaffected (string)

product : ESET Mail Security for IBM Domino (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

9 : { »

defaultStatus : unaffected (string)

product : ESET Security for Microsoft SharePoint Server (string)

vendor : ESET s.r.o (string)

versions : [ »

0 : { »

lessThanOrEqual : 11.0.15002.0 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

]

datePublic : 2024-07-12T10:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met. (string)

}

]

value : Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-578 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-578 Disable Security Software (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-276 (string)

description : CWE-276 Incorrect Default Permissions (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 4a9b9929-2450-4021-b7b9-469a0255b215 (string)

shortName : ESET (string)

dateUpdated : 2024-07-16T08:17:59.962Z (string)

}

references : [ »

0 : { »

url : https://support.eset.com/en/ca8688 (string)

}

]

source : { »

advisory : ca8688 (string)

discovery : UNKNOWN (string)

}

title : Denial of Service in ESET products for Windows (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-07-16T13:10:29.360811Z (string)

id : CVE-2024-3779 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-07-16T13:10:35.421Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T20:20:01.654Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://support.eset.com/en/ca8688 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.eset.com/en/ca8688", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:20:01.654Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-3779", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-16T13:10:29.360811Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-16T13:10:32.947Z"}}], "cna": {"title": "Denial of Service in ESET products for Windows", "source": {"advisory": "ca8688", "discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-578", "descriptions": [{"lang": "en", "value": "CAPEC-578 Disable Security Software"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ESET s.r.o", "product": "ESET NOD32 Antivirus", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "17.1.13.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Internet Security", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "17.1.13.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Smart Security Premium", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "17.1.13.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Security Ultimate", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "17.1.13.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Endpoint Antivirus for Windows", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "11.0.2044.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Endpoint Security for Windows", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "11.0.2044.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Server Security for Windows Server", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "11.0.12011.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Mail Security for Microsoft Exchange Server", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "11.0.10005.0"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Mail Security for IBM Domino", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ESET s.r.o", "product": "ESET Security for Microsoft SharePoint Server", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "11.0.15002.0"}], "defaultStatus": "unaffected"}], "datePublic": "2024-07-12T10:00:00.000Z", "references": [{"url": "https://support.eset.com/en/ca8688"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET\u2019s security product inoperable, provided non-default preconditions were met.", "supportingMedia": [{"type": "text/html", "value": "Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET\u2019s security product inoperable, provided non-default preconditions were met.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions"}]}], "providerMetadata": {"orgId": "4a9b9929-2450-4021-b7b9-469a0255b215", "shortName": "ESET", "dateUpdated": "2024-07-16T08:17:59.962Z"}}}, "cveMetadata": {"cveId": "CVE-2024-3779", "state": "PUBLISHED", "dateUpdated": "2024-08-01T20:20:01.654Z", "dateReserved": "2024-04-15T07:03:57.841Z", "assignerOrgId": "4a9b9929-2450-4021-b7b9-469a0255b215", "datePublished": "2024-07-16T08:17:59.962Z", "assignerShortName": "ESET"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://support.eset.com/en/ca8688 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T20:20:01.654Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-3779 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-07-16T13:10:29.360811Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-07-16T13:10:32.947Z (string)

}

]

cna : { »

title : Denial of Service in ESET products for Windows (string)

source : { »

advisory : ca8688 (string)

discovery : UNKNOWN (string)

}

impacts : [ »

0 : { »

capecId : CAPEC-578 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-578 Disable Security Software (string)

}

]

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.1 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H (string)

integrityImpact : LOW (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : NONE (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : ESET s.r.o (string)

product : ESET NOD32 Antivirus (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 17.1.13.0 (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

vendor : ESET s.r.o (string)

product : ESET Internet Security (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 17.1.13.0 (string)

}

]

defaultStatus : unaffected (string)

}

2 : { »

vendor : ESET s.r.o (string)

product : ESET Smart Security Premium (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 17.1.13.0 (string)

}

]

defaultStatus : unaffected (string)

}

3 : { »

vendor : ESET s.r.o (string)

product : ESET Security Ultimate (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 17.1.13.0 (string)

}

]

defaultStatus : unaffected (string)

}

4 : { »

vendor : ESET s.r.o (string)

product : ESET Endpoint Antivirus for Windows (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 11.0.2044.0 (string)

}

]

defaultStatus : unaffected (string)

}

5 : { »

vendor : ESET s.r.o (string)

product : ESET Endpoint Security for Windows (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 11.0.2044.0 (string)

}

]

defaultStatus : unaffected (string)

}

6 : { »

vendor : ESET s.r.o (string)

product : ESET Server Security for Windows Server (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 11.0.12011.0 (string)

}

]

defaultStatus : unaffected (string)

}

7 : { »

vendor : ESET s.r.o (string)

product : ESET Mail Security for Microsoft Exchange Server (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 11.0.10005.0 (string)

}

]

defaultStatus : unaffected (string)

}

8 : { »

vendor : ESET s.r.o (string)

product : ESET Mail Security for IBM Domino (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

9 : { »

vendor : ESET s.r.o (string)

product : ESET Security for Microsoft SharePoint Server (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 11.0.15002.0 (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2024-07-12T10:00:00.000Z (string)

references : [ »

0 : { »

url : https://support.eset.com/en/ca8688 (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-276 (string)

description : CWE-276 Incorrect Default Permissions (string)

}

]

}

]

providerMetadata : { »

orgId : 4a9b9929-2450-4021-b7b9-469a0255b215 (string)

shortName : ESET (string)

dateUpdated : 2024-07-16T08:17:59.962Z (string)

}

cveMetadata : { »

cveId : CVE-2024-3779 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-01T20:20:01.654Z (string)

dateReserved : 2024-04-15T07:03:57.841Z (string)

assignerOrgId : 4a9b9929-2450-4021-b7b9-469a0255b215 (string)

datePublished : 2024-07-16T08:17:59.962Z (string)

assignerShortName : ESET (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset:internet_security:*:*:*:*:*:*:*:*", "matchCriteriaId": "B883CA27-1FC9-4AF6-9BBD-6FC41DE3A667", "versionEndExcluding": "17.2.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:nod32:*:*:*:*:*:*:*:*", "matchCriteriaId": "620325BE-DDE6-4ADE-BB6A-36CA8E48A30A", "versionEndExcluding": "17.2.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:security:*:*:*:*:ultimate:*:*:*", "matchCriteriaId": "0EB1BEC6-15AD-4B95-A954-814594AE8FCB", "versionEndExcluding": "17.2.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:smart_security:*:*:*:*:premium:*:*:*", "matchCriteriaId": "B5D76653-60CC-4107-A027-02E2A1B255DE", "versionEndExcluding": "17.2.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:*", "matchCriteriaId": "102DE882-64EA-4752-9722-2EAE0074BF91", "versionEndExcluding": "11.1.2039.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:*", "matchCriteriaId": "56305C95-A7D6-49BC-8CEE-5EA343190842", "versionEndExcluding": "11.1.2039.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset:server_security:*:*:*:*:*:windows_server:*:*", "matchCriteriaId": "9F9E6C2C-AA89-4377-B0A0-6B3B36209B90", "versionEndExcluding": "11.0.12012.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:*", "matchCriteriaId": "A8906CBA-D3F0-4BC1-B32A-11D4425EE784", "versionEndIncluding": "11.0.10008.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:*", "matchCriteriaId": "5043B5B1-38B2-4621-B738-A79E5DF8D98E", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint_server:*:*", "matchCriteriaId": "61BC0A21-A589-48B5-9D35-E0E8749EDFDB", "versionEndExcluding": "11.0.15004.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET\u2019s security product inoperable, provided non-default preconditions were met."}, {"lang": "es", "value": "La vulnerabilidad de denegaci\u00f3n de servicio presente poco despu\u00e9s de la instalaci\u00f3n o actualizaci\u00f3n del producto, potencialmente permiti\u00f3 que un atacante dejara inoperable el producto de seguridad de ESET, siempre que se cumplieran condiciones previas no predeterminadas."}], "id": "CVE-2024-3779", "lastModified": "2024-11-21T09:30:22.927", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 4.2, "source": "security@eset.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-07-16T09:15:02.877", "references": [{"source": "security@eset.com", "tags": ["Vendor Advisory"], "url": "https://support.eset.com/en/ca8688"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.eset.com/en/ca8688"}], "sourceIdentifier": "security@eset.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-276"}], "source": "security@eset.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-276"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:eset:internet_security:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B883CA27-1FC9-4AF6-9BBD-6FC41DE3A667 (string)

versionEndExcluding : 17.2.7.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:eset:nod32:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 620325BE-DDE6-4ADE-BB6A-36CA8E48A30A (string)

versionEndExcluding : 17.2.7.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:eset:security:*:*:*:*:ultimate:*:*:* (string)

matchCriteriaId : 0EB1BEC6-15AD-4B95-A954-814594AE8FCB (string)

versionEndExcluding : 17.2.7.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:eset:smart_security:*:*:*:*:premium:*:*:* (string)

matchCriteriaId : B5D76653-60CC-4107-A027-02E2A1B255DE (string)

versionEndExcluding : 17.2.7.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* (string)

matchCriteriaId : 102DE882-64EA-4752-9722-2EAE0074BF91 (string)

versionEndExcluding : 11.1.2039.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* (string)

matchCriteriaId : 56305C95-A7D6-49BC-8CEE-5EA343190842 (string)

versionEndExcluding : 11.1.2039.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:eset:server_security:*:*:*:*:*:windows_server:*:* (string)

matchCriteriaId : 9F9E6C2C-AA89-4377-B0A0-6B3B36209B90 (string)

versionEndExcluding : 11.0.12012.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:* (string)

matchCriteriaId : A8906CBA-D3F0-4BC1-B32A-11D4425EE784 (string)

versionEndIncluding : 11.0.10008.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:* (string)

matchCriteriaId : 5043B5B1-38B2-4621-B738-A79E5DF8D98E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint_server:*:* (string)

matchCriteriaId : 61BC0A21-A589-48B5-9D35-E0E8749EDFDB (string)

versionEndExcluding : 11.0.15004.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met. (string)

}

1 : { »

lang : es (string)

value : La vulnerabilidad de denegación de servicio presente poco después de la instalación o actualización del producto, potencialmente permitió que un atacante dejara inoperable el producto de seguridad de ESET, siempre que se cumplieran condiciones previas no predeterminadas. (string)

}

]

id : CVE-2024-3779 (string)

lastModified : 2024-11-21T09:30:22.927 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 4.2 (number)

source : security@eset.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-07-16T09:15:02.877 (string)

references : [ »

0 : { »

source : security@eset.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.eset.com/en/ca8688 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.eset.com/en/ca8688 (string)

}

]

sourceIdentifier : security@eset.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-276 (string)

}

]

source : security@eset.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-276 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object