The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00211
Percentile: 0.43771

CVSS Scoring

Affected Products

• cpe:2.3:a:eset:smart_security:*:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.551:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.560:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.563:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.621:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.642:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.650:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.657:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.667:*:*:*:*:*:*:*
• cpe:2.3:a:eset:smart_security:3.0.669:*:*:*:*:*:*:*

← Back to Home