Riskcovery

CVE-2024-3779

Denial of Service in ESET products for Windows

State
Published
Severity
6.1 Medium
Published
Jul 16, 2024
Updated
Aug 1, 2024
Reserved
Apr 15, 2024

Read the record on cve.org

Description

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.

Scores

CVSSScoreVectorSource
3.16.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:HESET

Weaknesses

  • CWE-276 Incorrect Default Permissions

Affected Products

ProductVersions
ESET NOD32 AntivirusESET s.r.o
  • 17.1.13.0 and earlierAffected
ESET Internet SecurityESET s.r.o
  • 17.1.13.0 and earlierAffected
ESET Smart Security PremiumESET s.r.o
  • 17.1.13.0 and earlierAffected
ESET Security UltimateESET s.r.o
  • 17.1.13.0 and earlierAffected
ESET Endpoint Antivirus for WindowsESET s.r.o
  • 11.0.2044.0 and earlierAffected
ESET Endpoint Security for WindowsESET s.r.o
  • 11.0.2044.0 and earlierAffected
ESET Server Security for Windows ServerESET s.r.o
  • 11.0.12011.0 and earlierAffected
ESET Mail Security for Microsoft Exchange ServerESET s.r.o
  • 11.0.10005.0 and earlierAffected
ESET Mail Security for IBM DominoESET s.r.o
  • 0Affected
ESET Security for Microsoft SharePoint ServerESET s.r.o
  • 11.0.15002.0 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.