CVE-2014-4973

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.

CVSS v2.0 6.9 MEDIUM

6.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 3.4 / Impact : 10.0

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://seclists.org/fulldisclosure/2014/Aug/52
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/	Exploit

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:eset:smart_security:5.0.94:::::::*
	cpe:2.3:a:eset:smart_security:5.0.95:::::::*
	cpe:2.3:a:eset:smart_security:5.2.9:::::::*
	cpe:2.3:a:eset:smart_security:5.2.15:::::::*
	cpe:2.3:a:eset:smart_security:6.0.306:::::::*
	cpe:2.3:a:eset:smart_security:6.0.308:::::::*
	cpe:2.3:a:eset:smart_security:6.0.314:::::::*
	cpe:2.3:a:eset:smart_security:6.0.316:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:eset:endpoint_security:5.0.2113:::::::*
	cpe:2.3:a:eset:endpoint_security:5.0.2122:::::::*
	cpe:2.3:a:eset:endpoint_security:5.0.2126:::::::*
	cpe:2.3:a:eset:endpoint_security:5.0.2214:::::::*
	cpe:2.3:a:eset:endpoint_security:5.0.2225:::::::*
	cpe:2.3:a:eset:endpoint_security:5.0.2228:::::::*

History

No history.

Information

Published : 2014-09-23 15:55

Updated : 2024-02-28 12:20

NVD link : CVE-2014-4973

Mitre link : CVE-2014-4973

CVE.ORG link : CVE-2014-4973

JSON object : View

Products Affected

eset

endpoint_security
smart_security

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2014-4973", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-09-23T15:55:06.480", "references": [{"url": "http://seclists.org/fulldisclosure/2014/Aug/52", "source": "cve@mitre.org"}, {"url": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call."}, {"lang": "es", "value": "El controlador del filtro NIDS de ESET Personal Firewall (EpFwNdis.sys) en el m\u00f3dulo del Firewall Build 1183 (20140214) y anteriores en productos ESET Smart Security y ESET Endpoint Security 5.0 hasta 7.0 permite a usuarios locales ganar privilegios a trav\u00e9s de un argumento manipulado en una llamada IOCTL 0x830020CC."}], "lastModified": "2014-09-24T14:53:29.363", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:eset:smart_security:5.0.94:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6C5C72A-8668-4B1C-8D1E-0968A8A0AFEE"}, {"criteria": "cpe:2.3:a:eset:smart_security:5.0.95:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB520877-84B0-4728-9F98-C186A536C1C1"}, {"criteria": "cpe:2.3:a:eset:smart_security:5.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56738037-06F6-4FD1-AE46-FA18664256A0"}, {"criteria": "cpe:2.3:a:eset:smart_security:5.2.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFD5AF33-7663-4387-8FF7-48E0C3E1754F"}, {"criteria": "cpe:2.3:a:eset:smart_security:6.0.306:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C6C6312-9A9A-4D7C-B853-64983076D27E"}, {"criteria": "cpe:2.3:a:eset:smart_security:6.0.308:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F03CE87-5432-484B-9428-4A59D6A34DA2"}, {"criteria": "cpe:2.3:a:eset:smart_security:6.0.314:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E374A62-36AB-446D-8C10-F57DDBE2B45F"}, {"criteria": "cpe:2.3:a:eset:smart_security:6.0.316:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B472F40-771C-4D80-A005-F203025300BF"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:eset:endpoint_security:5.0.2113:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C76A864-D9CC-43C2-88E1-55D0CC696601"}, {"criteria": "cpe:2.3:a:eset:endpoint_security:5.0.2122:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B01E66DD-E3B4-413A-A73D-7FEA4C5C1342"}, {"criteria": "cpe:2.3:a:eset:endpoint_security:5.0.2126:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CAEC019-865A-49CF-B9B7-7DAF2EAFDFA8"}, {"criteria": "cpe:2.3:a:eset:endpoint_security:5.0.2214:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B23B1663-D74C-4B1B-A0BF-F68B327E8F99"}, {"criteria": "cpe:2.3:a:eset:endpoint_security:5.0.2225:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "057902A1-D019-43A9-8A3A-D9C14A4200A7"}, {"criteria": "cpe:2.3:a:eset:endpoint_security:5.0.2228:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98974D2B-5561-43B2-9EB8-0B5617A2FA88"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}