CVE-2024-2003 - CVE House
Back to Database
Status published High CVE-2024-2003

Local Privilege Escalation in Quarantine of ESET products for Windows

Vulnerability Description

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2003

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

ESET, spol. s r.o.

View all reports →

Affected Software

ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Small Business Security, ESET Safe Server, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure
Vulnerable Versions:
0

Timeline

Official Publish: June 21st, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)