ESET Endpoint Security vulnerabilities

3 known vulnerabilities in ESET Endpoint Security from ESET, spol. s r.o.. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  ESET NOD32 Antivirus: Improper Certificate Validation

  CVE-2023-5594Dec 21, 2023ESET, spol. s r.o.

  Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

• 7.8 High severity

  ESET NOD32 Antivirus: Improper Privilege Management

  CVE-2023-3160Aug 14, 2023ESET, spol. s r.o.

  The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.

• 7.1 High severity

  ESET NOD32 Antivirus: Improper Handling of Exceptional Conditions

  CVE-2022-27167May 10, 2022ESET, spol. s r.o.

  Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior