ESET NOD32 Antivirus up to 1250 on Windows mount point

Summaryinfo

A vulnerability marked as critical has been reported in ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Security Ultimate, Small Business Security, Safe Server, Endpoint Antivirus, Endpoint Security for Windows, Server Security for Windows Server, Mail Security for Microsoft Exchange Server, Mail Security for IBM Domino, Security for Microsoft SharePoint Server and File Security for Microsoft Azure up to 1250 on Windows. This issue affects some unknown processing. Performing a manipulation results in mount point. This vulnerability is reported as CVE-2024-7400. The attack requires a local approach. No exploit exists.

Detailsinfo

A vulnerability classified as critical has been found in ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Security Ultimate, Small Business Security, Safe Server, Endpoint Antivirus, Endpoint Security for Windows, Server Security for Windows Server, Mail Security for Microsoft Exchange Server, Mail Security for IBM Domino, Security for Microsoft SharePoint Server and File Security for Microsoft Azure up to 1250 on Windows. This affects an unknown code. The manipulation with an unknown input leads to a mount point vulnerability. CWE is classifying the issue as CWE-1386. The product opens a file or directory, but it does not properly prevent the name from being associated with a junction or mount point to a destination that is outside of the intended control sphere. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.

It is possible to read the advisory at support.eset.com. This vulnerability is uniquely identified as CVE-2024-7400 since 08/02/2024. The exploitability is told to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Groupware Software

Vendor

• ESET

Name

• Endpoint Antivirus
• Endpoint Security for Windows
• File Security for Microsoft Azure
• Internet Security
• Mail Security for IBM Domino
• Mail Security for Microsoft Exchange Server
• NOD32 Antivirus
• Safe Server
• Security for Microsoft SharePoint Server
• Security Ultimate
• Server Security for Windows Server
• Small Business Security
• Smart Security Premium

Version

• 1250

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion