Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | 1464 |
| ESET, spol. s r.o. | ESET Internet Security | 1464 |
| ESET, spol. s r.o. | ESET Smart Security Premium | 1464 |
| ESET, spol. s r.o. | ESET Security Ultimate | 1464 |
| ESET, spol. s r.o. | ESET Endpoint Antivirus | 1464 |
| ESET, spol. s r.o. | ESET Endpoint Security | 1464 |
| ESET, spol. s r.o. | ESET Endpoint Antivirus for Linux 10.0 and above | 1464 |
| ESET, spol. s r.o. | ESET Server Security for Windows Server | 1464 |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | 1464 |
| ESET, spol. s r.o. | ESET Mail Security for IBM Domino | 1464 |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | 1464 |
| ESET, spol. s r.o. | ESET File Security for Microsoft Azure | 1464 |
| ESET, spol. s r.o. | ESET Server Security for Linux 10.1 and above | 1464 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.