Improper following of a certificate's chain of trust in ESET security products

7.5 CVSS

Vulnerability Description

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-5594

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed

More from ESET, spol. s r.o.

View All →

CVE-2024-7400

Local privilege escalation in ESET products for Windows

High 8.5

CVE-2024-6654

Denial of Service vulnerability in ESET products for macOS

Medium 6.8

CVE-2024-2003

Local Privilege Escalation in Quarantine of ESET products for Windows

High 7.3

CVE-2024-11859

DLL Search Order Hijacking in ESET products for Windows

High 8.4

CVE-2024-0353

Local privilege escalation in Windows products

High 7.8

Affected Vendor

ESET, spol. s r.o.

View all reports →

Affected Software

ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Endpoint Antivirus for Linux 10.0 and above, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure, ESET Server Security for Linux 10.1 and above

Vulnerable Versions:

1464