CVE-2023-7043

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 31, 2024
Updated: Feb 9, 2024
CWE ID 428

Summary

CVE-2023-7043 is a vulnerability that affects ESET products. It allows an attacker to drop a prepared program to a specific location and run it on boot with NT AUTHORITY\NetworkService permissions. The vulnerability has a base severity level of MEDIUM and a base score of 5.5. The privileges required to exploit the vulnerability are LOW, and there is no user interaction required. The attack vector is LOCAL, meaning that an attacker needs local access to the system to exploit the vulnerability. The impact of this vulnerability is high in terms of integrity, but it does not have any effect on confidentiality. To remediate this vulnerability, ESET products should address the unquoted service path issue, ensuring that all paths are properly quoted. Failure to address this vulnerability can pose a potential danger to organizations using ESET products, as it can allow unauthorized programs to execute with elevated privileges on affected systems.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-7043 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options