ESET Inspect Connector Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in ESET Inspect Connector for Windows, versions through 2.8.5555. This vulnerability allows a low-privileged user to place a custom configuration file in a specific location. When ESET Inspect Connector is launched, it loads a malicious DLL file from this configuration file, executing it with SYSTEM permissions. This behavior results in unauthorized privilege escalation.

Impact

Exploitation of this vulnerability allows for local privilege escalation, with malicious code executed under the SYSTEM account.

Remediation

Users are advised to upgrade to ESET Inspect Connector version 3.0.5765 or later. The fixed version is available on the ESET website or through the ESET Repository.