CVE-2023-5594
Improper following of a certificate's chain of trust in ESET security products
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Improper following of a certificate's chain of trust in ESET security products
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
- Record
CVE-2023-5594- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
EUVDEUVD-2023-57887
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
- Record
EUVD-2023-57887- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4mwg-64w4-5g5m
Improper validation of the server’s certificate chain in secure traffic scanning feature...
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
- Record
GHSA-4mwg-64w4-5g5m- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
NVD
Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.
- Record
CVE-2023-5594- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N - CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
Affected products
- eset security
- eset endpoint antivirus
- eset endpoint security
- eset file security
- eset internet security
- eset mail security
- eset nod32 antivirus
- eset server security
- eset smart security
- eset, spol. s r.o. eset endpoint antivirus
- eset, spol. s r.o. eset endpoint antivirus for linux 10.0 and above
- eset, spol. s r.o. eset endpoint security
Show 10 moreShow less
- eset, spol. s r.o. eset file security for microsoft azure
- eset, spol. s r.o. eset internet security
- eset, spol. s r.o. eset mail security for ibm domino
- eset, spol. s r.o. eset mail security for microsoft exchange server
- eset, spol. s r.o. eset nod32 antivirus
- eset, spol. s r.o. eset security for microsoft sharepoint server
- eset, spol. s r.o. eset security ultimate
- eset, spol. s r.o. eset server security for linux 10.1 and above
- eset, spol. s r.o. eset server security for windows server
- eset, spol. s r.o. eset smart security premium
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-5594 is a high vulnerability (CVSS 7.5) in Eset Security, published December 21, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. No source names a fixed version.