Lucene search

ESETCVE-2021-37852

HistoryFeb 09, 2022 - 6:15 a.m.

CVE-2021-37852

2022-02-0906:15:06

CWE-269

ESET

web.nvd.nist.gov

404

eset

windows

privilege escalation

cve-2021-37852

security vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Affected configurations

Nvd

Node

esetendpoint_antivirusRange6.6.2046.0–7.3.2055.0windows

esetendpoint_antivirusRange8.0–8.0.2028.3windows

esetendpoint_antivirusRange8.1–8.1.2031.4windows

esetendpoint_antivirusRange9.0–9.0.2032.6windows

esetendpoint_securityRange6.6.2046.0–7.3.2055.0windows

esetendpoint_securityRange8.0–8.0.2028.3windows

esetendpoint_securityRange8.1–8.1.2031.4windows

esetendpoint_securityRange9.0–9.0.2032.6windows

esetfile_securityRange7.0.12014.0–7.3.12006.0windows_server

esetinternet_securityRange10.0.337.1–15.0.18.0windows

esetmail_securityRange7.0.10019–7.3.10014.0exchange_server

esetmail_securityRange7.0.14008.0–7.3.14003.0domino

esetmail_securityRange8.0–8.0.14006.0domino

esetmail_securityRange8.0.10012.0–8.0.10018.0exchange_server

esetnod32_antivirusRange10.0.337.1–15.0.18.0windows

esetsecurityRange7.0.15008.0–8.0.15004.0sharepoint

esetserver_securityRange7.0.12016.1002–7.2.12004.1000azure

esetserver_securityMatch8.0.12003.0windows_server

esetserver_securityMatch8.0.12003.1windows_server

esetsmart_securityRange10.0.337.1–15.0.18.0-windows

esetsmart_securityRange10.0.337.1–15.0.18.0premiumwindows

VendorProductVersionCPE
esetendpoint_antivirus*cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:*
esetendpoint_security*cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:*
esetfile_security*cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:*
esetinternet_security*cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:*
esetmail_security*cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:*
esetmail_security*cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:*
esetnod32_antivirus*cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:*
esetsecurity*cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint:*:*
esetserver_security*cpe:2.3:a:eset:server_security:*:*:*:*:azure:*:*:*
esetserver_security8.0.12003.0cpe:2.3:a:eset:server_security:8.0.12003.0:*:*:*:*:windows_server:*:*

Vendor	Product	Version	CPE
eset	endpoint_antivirus	*	cpe:2.3:a:eset:endpoint_antivirus::::::windows::*
eset	endpoint_security	*	cpe:2.3:a:eset:endpoint_security::::::windows::*
eset	file_security	*	cpe:2.3:a:eset:file_security::::::windows_server::*
eset	internet_security	*	cpe:2.3:a:eset:internet_security::::::windows::*
eset	mail_security	*	cpe:2.3:a:eset:mail_security::::::exchange_server::*
eset	mail_security	*	cpe:2.3:a:eset:mail_security::::::domino::*
eset	nod32_antivirus	*	cpe:2.3:a:eset:nod32_antivirus::::::windows::*
eset	security	*	cpe:2.3:a:eset:security::::::sharepoint::*
eset	server_security	*	cpe:2.3:a:eset:server_security:::::azure:::*
eset	server_security	8.0.12003.0	cpe:2.3:a:eset:server_security:8.0.12003.0:::::windows_server::

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "product": "ESET NOD32 Antivirus",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "15.0.18.0",
        "status": "affected",
        "version": "10.0.337.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Internet Security",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "15.0.18.0",
        "status": "affected",
        "version": "10.0.337.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Smart Security",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "15.0.18.0",
        "status": "affected",
        "version": "10.0.337.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Endpoint Antivirus for Windows",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "9.0.2032.4",
        "status": "affected",
        "version": "6.6.2046.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Endpoint Security for Windows",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "9.0.2032.4",
        "status": "affected",
        "version": "6.6.2046.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Server Security for Microsoft Windows Server",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "8.0.12003.1",
        "status": "affected",
        "version": "8.0.12003.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET File Security for Microsoft Windows Server",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "7.3.12006.0",
        "status": "affected",
        "version": "7.0.12014.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Server Security for Microsoft Azure",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "7.2.12004.1000",
        "status": "affected",
        "version": "7.0.12016.1002",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Security for Microsoft SharePoint Server",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "8.0.15004.0",
        "status": "affected",
        "version": "7.0.15008.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Mail Security for IBM Domino",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "8.0.14004.0",
        "status": "affected",
        "version": "7.0.14008.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ESET Mail Security for Microsoft Exchange Server",
    "vendor": "ESET",
    "versions": [
      {
        "lessThanOrEqual": "8.0.10016.0",
        "status": "affected",
        "version": "7.0.10019",
        "versionType": "custom"
      }
    ]
  }
]

References

support.eset.com/en/ca8223-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows

www.zerodayinitiative.com/advisories/ZDI-22-148/

Social References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

Related for CVE-2021-37852