CVE-2020-11446: High severity eset nod32 antivirus vulnerability
ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-11446?
CVE-2020-11446 is a vulnerability that allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be writable by the user, thus achieving privilege escalation.
Which versions of ESET Antivirus and Antispyware are affected by CVE-2020-11446?
Versions 1553 through 1560 of ESET Antivirus and Antispyware are affected by CVE-2020-11446.
How can an attacker exploit CVE-2020-11446?
An attacker with limited access rights can exploit CVE-2020-11446 by creating hard links in ESET directories and then forcing the product to write through these links into files that would normally not be writable by the user.
What is the severity of CVE-2020-11446?
The severity of CVE-2020-11446 is high, with a CVSS score of 7.8.
How can I fix CVE-2020-11446?
To fix CVE-2020-11446, users should update their ESET products for Windows to the latest version as provided by the vendor.