CVE-2014-4973

no score yetEPSS 1.3%

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2014-09-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eset:endpoint_security
eset:smart_security

References

http://seclists.org/fulldisclosure/2014/Aug/52
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/
http://seclists.org/fulldisclosure/2014/Aug/52
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4973/

Check your stack JSON