CVE-2023-5594

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

0.38%

Published

Dec 21, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

Weaknesses (CWE)

CWE-295CWE-295

Affected Products (13)

eset · endpoint_antivirusvulnerable

eset · endpoint_securityvulnerable

eset · file_securityvulnerable

eset · internet_securityvulnerable

eset · mail_securityvulnerable

eset · nod32_antivirusvulnerable

eset · securityvulnerable

eset · server_securityvulnerable

eset · smart_securityvulnerable

References (2)

https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed

Vendor Advisory

https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs