CVE-2014-4973 The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows....
MediumCVSS 6.9
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset smart security | = 5.0.94 | No fix listed |
| eset smart security | = 5.0.95 | No fix listed |
| eset smart security | = 5.2.9 | No fix listed |
| eset smart security | = 5.2.15 | No fix listed |
| eset smart security | = 6.0.306 | No fix listed |
| eset smart security | = 6.0.308 | No fix listed |
| eset smart security | = 6.0.314 | No fix listed |
| eset smart security | = 6.0.316 | No fix listed |
| eset endpoint security | = 5.0.2113 | No fix listed |
| eset endpoint security | = 5.0.2122 | No fix listed |
| eset endpoint security | = 5.0.2126 | No fix listed |
| eset endpoint security | = 5.0.2214 | No fix listed |
| eset endpoint security | = 5.0.2225 | No fix listed |
| eset endpoint security | = 5.0.2228 | No fix listed |