CVE-2023-7043: Eset Endpoint Antivirus

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions.

Affected products

• Eset Endpoint Antivirus: from 10.1.2046.0, before 11.0.2032.0 (fixed in 11.0.2032.0)
• Eset Endpoint Security: from 10.1.2046.0, before 11.0.2032.0 (fixed in 11.0.2032.0)
• Eset Internet Security: from 16.1.14.0, before 17.0.15.0 (fixed in 17.0.15.0)
• Eset Mail Security: version 10.1.10012.0 only
• Eset NOD32 Antivirus: from 16.1.14.0, before 17.0.15.0 (fixed in 17.0.15.0)
• Eset Smart Security Premium: from 16.1.14.0, before 17.0.15.0 (fixed in 17.0.15.0)

Published 2024-01-31. Last modified 2026-06-17.