CVE-2024-7400

Estado: AplazadaAlta (8.5)—

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.

CVSS

Versión: 4.0
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Puntuación base: 8.5

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.22%
Percentil entre todas las CVEs puntuadas: 12
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Eset — Eset^AI Microsoft — Windows^AI

CWE

CWE-1386

Referencias

https://support.eset.com/en/ca8726-local-privilege-escalation-fixed-for-vulnerability-during-detected-file-removal-in-eset-products-for-windows

JSON original (NVD)

Mostrar

{
  "id": "CVE-2024-7400",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-7400",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-27T17:57:43.358687Z"
        }
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "security@eset.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 8.5,
          "Automatable": "NOT_DEFINED",
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "security@eset.com",
      "affectedData": [
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET NOD32 Antivirus",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Internet Security",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Smart Security Premium",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Security Ultimate",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Small Business Security",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Safe Server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Endpoint Antivirus",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Endpoint Security for Windows",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Server Security for Windows Server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Mail Security for Microsoft Exchange Server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Mail Security for IBM Domino",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET Security for Microsoft SharePoint Server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET, spol. s r.o.",
          "modules": [
            "Cleaner module"
          ],
          "product": "ESET File Security for Microsoft Azure",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:eset:security:-:*:*:*:*:sharepoint_server:*:*",
            "cpe:2.3:a:eset:safe_server:-:*:*:*:*:*:*:*",
            "cpe:2.3:a:eset:security_ultimate:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:eset:server_security:-:*:*:*:*:windows_server:*:*",
            "cpe:2.3:a:eset:small_business_security:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:eset:smart_security:-:*:*:*:premium:*:*:*",
            "cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:eset:endpoint_security:-:*:*:*:*:windows:*:*",
            "cpe:2.3:a:eset:file_security:-:*:*:*:*:azure:*:*",
            "cpe:2.3:a:eset:internet_security:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:eset:mail_security:-:*:*:*:*:domino:*:*",
            "cpe:2.3:a:eset:mail_security:-:*:*:*:*:exchange_server:*:*"
          ],
          "vendor": "eset",
          "product": "mail_security",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1250"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-09-27T07:15:03.387",
  "references": [
    {
      "url": "https://support.eset.com/en/ca8726-local-privilege-escalation-fixed-for-vulnerability-during-detected-file-removal-in-eset-products-for-windows",
      "source": "security@eset.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@eset.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1386"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad potencialmente permitió a un atacante hacer un mal uso de las operaciones de archivos de ESET durante la eliminación de un archivo detectado en el sistema operativo Windows para eliminar archivos sin tener los permisos adecuados para hacerlo."
    }
  ],
  "lastModified": "2026-06-17T08:20:01.293",
  "sourceIdentifier": "security@eset.com"
}