Riskcovery

CVE-2022-27167

Arbitrary File Deletion in ESET products for Windows

State
Published
Severity
7.1 High
Published
May 10, 2022
Updated
Sep 16, 2024
Reserved
Mar 14, 2022

Read the record on cve.org

Description

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HESET

Weaknesses

  • CWE-280 Improper Handling of Insufficient Permissions or Privileges

Affected Products

ProductVersions
ESET NOD32 AntivirusESET, spol. s r.o.
  • 11.2 to before 15.1.12.0Affected
ESET Internet SecurityESET, spol. s r.o.
  • 11.2 to before 15.1.12.0Affected
ESET Smart Security PremiumESET, spol. s r.o.
  • 11.2 to before 15.1.12.0Affected
ESET Endpoint AntivirusESET, spol. s r.o.
  • 6.0 to before 9.0.2046.0Affectedfrom 8.1.2050.0Not affectedfrom 8.0.2053.0Not affected
ESET Endpoint SecurityESET, spol. s r.o.
  • 6.0 to before 9.0.2046.0Affectedfrom 8.1.2050.0Not affectedfrom 8.0.2053.0Not affected
ESET Server Security for Microsoft Windows ServerESET, spol. s r.o.
  • 8.0 to before 9.0.12012.0Affected
ESET File Security for Microsoft Windows ServerESET, spol. s r.o.
  • 6.0 8.0.12013.0Affected
ESET Mail Security for Microsoft Exchange ServerESET, spol. s r.o.
  • 6.0 to before 8.0.10020.0Affected
ESET Mail Security for IBM DominoESET, spol. s r.o.
  • 6.0 to before 8.0.14011.0Affected
ESET Security for Microsoft SharePoint ServerESET, spol. s r.o.
  • 6.0 to before 8.0.15009.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.