CVEvulnerability

CVE-2014-4973

6.9 MEDIUM Published 2014-09-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.

Affected configurations

• eset smart security 5.0.94 • eset smart security 5.0.95 • eset smart security 5.2.9 • eset smart security 5.2.15 • eset smart security 6.0.306 • eset smart security 6.0.308 • eset smart security 6.0.314 • eset smart security 6.0.316 • eset endpoint security 5.0.2113 • eset endpoint security 5.0.2122 • eset endpoint security 5.0.2126 • eset endpoint security 5.0.2214 • eset endpoint security 5.0.2225 • eset endpoint security 5.0.2228

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References