ESET Inspect Connector Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in ESET Inspect Connector for Windows, specifically in version 3.0.5775.0 and earlier. The vulnerability arises from improper authentication in an inter-process communication (IPC) channel, allowing an attacker to send crafted Advanced Local Procedure Call (ALPC) requests to the vulnerable process. Without adequate authentication or origin validation, these requests could be accepted and processed, granting access to restricted functionalities.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users are advised to upgrade to ESET Inspect Connector version 3.1.6017.0 or later. The fixed version is available for download from the ESET website or via the ESET Repository.