Riskcovery

CVE-2021-37851

Local Privilege Escalation in ESET product for Windows

State
Published
Severity
7.3 High
Published
May 11, 2022
Updated
Sep 16, 2024
Reserved
Aug 2, 2021

Read the record on cve.org

Description

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HESET

Weaknesses

  • CWE-280 Improper Handling of Insufficient Permissions or Privileges

Affected Products

ProductVersions
ESET NOD32 AntivirusESET, spol. s r.o.
  • 11.2 to before 15.1.12.0Affected
ESET Internet SecurityESET, spol. s r.o.
  • 11.2 to before 15.1.12.0Affected
ESET Smart Security PremiumESET, spol. s r.o.
  • 11.2 to before 15.1.12.0Affected
ESET Endpoint AntivirusESET, spol. s r.o.
  • 6.0 to before 9.0.2046.0Affectedfrom 8.1.2050.0Not affectedfrom 8.0.2053.0Not affected
ESET Endpoint SecurityESET, spol. s r.o.
  • 6.0 to before 9.0.2046.0Affectedfrom 8.1.2050.0Not affectedfrom 8.0.2053.0Not affected
ESET Server Security for Microsoft Windows ServerESET, spol. s r.o.
  • 8.0 to before 9.0.12012.0Affected
ESET File Security for Microsoft Windows ServerESET, spol. s r.o.
  • 6.0 8.0.12013.0Affected
ESET Mail Security for Microsoft Exchange ServerESET, spol. s r.o.
  • 6.0 to before 8.0.10020.0Affected
ESET Mail Security for IBM DominoESET, spol. s r.o.
  • 6.0 to before 8.0.14011.0Affected
ESET Security for Microsoft SharePoint ServerESET, spol. s r.o.
  • 6.0 to before 8.0.15009.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.