VulnerabilityModified
CVE-2014-4974
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory…
LOW 2.1EPSS 0.54%
Does this matter?
Lower severity and a low EPSS score (0.54%). Track it; it rarely justifies an emergency change on its own.
Description
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.54% probability · 44th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- eset/personal firewall ndis filter
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/128874/ESET-7.0-Kernel-Memory-Leak.html
- http://seclists.org/fulldisclosure/2014/Oct/118
- http://www.securityfocus.com/bid/70770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98312
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4974/
- http://packetstormsecurity.com/files/128874/ESET-7.0-Kernel-Memory-Leak.html
- http://seclists.org/fulldisclosure/2014/Oct/118
- http://www.securityfocus.com/bid/70770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98312
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4974/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.