CVE-2024-0353
HIGHESET Endpoint Antivirus < 8.1.2062.0 - Local Privilege Escalation via File Deletion
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-0353. PoCs published by Milad karimi.
AI-analyzed exploit summary This is a writeup demonstrating an unquoted service path vulnerability in ESET NOD32 Antivirus 17.0.16.0. The author shows how the service path for 'ekrn.exe' is unquoted, which could potentially allow local privilege escalation if an attacker can place a malicious executable in a path with spaces.
Description
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Exploits (2)
This is a writeup demonstrating an unquoted service path vulnerability in ESET NOD32 Antivirus 17.0.16.0. The author shows how the service path for 'ekrn.exe' is unquoted, which could potentially allow local privilege escalation if an attacker can place a malicious executable in a path with spaces.
This is a writeup describing an unquoted service path vulnerability in ESET Service 16.0.26.0. The vulnerability could potentially allow local privilege escalation if an attacker can place a malicious executable in a path that the service attempts to execute.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H