CVE-2023-7043

Summary

CVE-2023-7043 is a vulnerability that affects ESET products. It allows an attacker to drop a prepared program to a specific location and run it on boot with NT AUTHORITY\NetworkService permissions. The vulnerability has a base severity level of MEDIUM and a base score of 5.5. The privileges required to exploit the vulnerability are LOW, and there is no user interaction required. The attack vector is LOCAL, meaning that an attacker needs local access to the system to exploit the vulnerability. The impact of this vulnerability is high in terms of integrity, but it does not have any effect on confidentiality. To remediate this vulnerability, ESET products should address the unquoted service path issue, ensuring that all paths are properly quoted. Failure to address this vulnerability can pose a potential danger to organizations using ESET products, as it can allow unauthorized programs to execute with elevated privileges on affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.