ZDI-CAN-22323: ZDI-24-182: ESET Smart Security Premium ekrn Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of ESET Smart Security Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-0353.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22323?
The severity of ZDI-CAN-22323 is classified as a significant security risk due to its potential for privilege escalation.
How do I fix ZDI-CAN-22323?
To fix ZDI-CAN-22323, ensure that you are using the latest version of ESET Smart Security Premium and apply any available security updates.
Who is affected by ZDI-CAN-22323?
ZDI-CAN-22323 affects users of ESET Smart Security Premium who have a configuration that allows low-privileged code execution.
What type of vulnerability is ZDI-CAN-22323?
ZDI-CAN-22323 is a local privilege escalation vulnerability that affects the security of the ESET Smart Security Premium software.
Can ZDI-CAN-22323 be exploited remotely?
No, ZDI-CAN-22323 requires local access to the system to exploit, meaning an attacker must already have low-privileged access.