CVE-2014-4974: Eset Personal Firewall Ndis Filter

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls.

Affected products

  • Eset Personal Firewall Ndis Filter: up to and including 1183_\(20140214\)

Published 2014-11-04. Last modified 2026-06-17.