CVE-2023-2847: Local privilege escalation in ESET products for Linux and MacOS
7.8
CVSS
Description
During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges.
ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.
Classification
CVE ID: CVE-2023-2847
CVSS Base Severity: HIGH
CVSS Base Score: 7.8
Affected Products
Vendor: ESET
Product: Server Security for Linux
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 5.08% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)