CVE-2023-5594: Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermedia

Routine

HIGH 7.5REMOTEDOWNGRADEMITIGATEMITIGATE

CVE-2023-5594 is a high-severity flaw (CVSS 7.5) affecting endpoint antivirus, endpoint antivirus, endpoint security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

Why this priority

High severity
Remotely exploitable, no login, no user action

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.5 (High)
Attack vector	Network (remote)
Attack complexity	High
Privileges needed	None
User interaction	None
EPSS exploit chance	0.4% (top 68%)
CISA exploited list	No
Weakness	CWE-295
Published	2023-12-21
Last modified	2026-06-17

Publisher (CNA): ESET · Vendor: eset

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-12-21 12:15 UTCPublished CVE record published
2026-06-17 06:48 UTCUpdated Record last modified

eset endpoint antivirus DOWNGRADE

Affected: >= 10.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 10.0

1. Check installed version

apt-cache policy endpoint-antivirus || rpm -q endpoint-antivirus || endpoint-antivirus --version

2. No fixed release: DOWNGRADE to a release before 10.0 (Debian / Ubuntu)

apt-cache madison endpoint-antivirus sudo apt install endpoint-antivirus=<VERSION_BEFORE_10.0> sudo apt-mark hold endpoint-antivirus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list endpoint-antivirus sudo dnf downgrade endpoint-antivirus-<VERSION_BEFORE_10.0> sudo dnf versionlock add endpoint-antivirus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

eset endpoint antivirus MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy endpoint-antivirus || rpm -q endpoint-antivirus || endpoint-antivirus --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

eset endpoint security MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy endpoint-security || rpm -q endpoint-security || endpoint-security --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

eset file security MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy file-security || rpm -q file-security || file-security --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

eset internet security MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy internet-security || rpm -q internet-security || internet-security --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

eset mail security MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy mail-security || rpm -q mail-security || mail-security --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-5594?

endpoint antivirus: downgrade or apply the listed mitigation; endpoint antivirus: mitigate or apply the listed mitigation; endpoint security: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2023-5594 being exploited?

CVE-2023-5594 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-5594 affect?

CVE-2023-5594 affects endpoint antivirus, endpoint antivirus, endpoint security. Severity is high (CVSS 7.5). Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

How urgent is CVE-2023-5594?

Priority 39/100. High severity; Remotely exploitable, no login, no user action

Software pages

ESET vulnerabilities

Related CVEs

CVE-2024-3779 MEDIUM 6.1 UPGRADE UPGRADE Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an
CVE-2024-0353 HIGH 7.8 UPGRADE UPGRADE Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to d
CVE-2023-7043 LOW 3.3 UPGRADE UPGRADE Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on b
CVE-2023-3160 HIGH 7.8 MITIGATE MITIGATE The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to
CVE-2023-2847 HIGH 7.8 UPGRADE UPGRADE During internal security analysis, a local privilege escalation vulnerability has been identified

References

← Back to latest CVEs