High severity · published Oct 14, 2019
CVE-2019-16519
ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cyber Security · Eset
through 6.7.900.0; through 6.7.900.0 · source: NVD
EA
Endpoint Antivirus · Eset
through 6.7.900.0 · source: NVD
ES
Endpoint Security · Eset
through 6.7.900.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-16519
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-16519
Vendor Advisory
http://support.eset.com/ca7317/
Broken Link
https://danishcyberdefence.dk/blog/esets-cyber-security
More from Cyber Security
9.8
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
7.8
CVE-2023-2847
During internal security analysis, a local privilege escalation vulnerability has been identified
7.5
CVE-2020-10193
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive
6.7
CVE-2019-19792
A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files
6.5
CVE-2019-17549
ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes