CVE-2023-7043

Unquoted service path in ESET products allows to 

drop a prepared program to a specific locationandrun on boot with the 

NT AUTHORITY\NetworkServicepermissions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
ESETCNA
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
esetendpoint_antivirus
10.1.2046.0 ≤
𝑥
< 11.0.2032.0
esetendpoint_security
10.1.2046.0 ≤
𝑥
< 11.0.2032.0
esetinternet_security
16.1.14.0 ≤
𝑥
< 17.0.15.0
esetmail_security
10.1.10012.0
esetnod32_antivirus
16.1.14.0 ≤
𝑥
< 17.0.15.0
esetsmart_security_premium
16.1.14.0 ≤
𝑥
< 17.0.15.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.eset.com/en/ca8602
https://support.eset.com/en/ca8602