CVE-2023-7043

No fix known EPSS <1%CVSS 3.3

Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.

Published 2024-01-31 · CVE record · OSV

Products: ESET, spol. s r.o. ESET Endpoint Security, ESET, spol. s r.o. ESET Endpoint Antivirus, ESET, spol. s r.o. ESET NOD32 Antivirus, ESET, spol. s r.o. ESET Internet Security, ESET, spol. s r.o. ESET Smart Security Premium, ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server