Local Privilege Escalation in ESET product for Windows
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 15.1.12.0, 8.0.2053.0, 9.0.12012.0, 8.0.10020.0, 8.0.14011.0, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
Timeline
- CVE published
- Record last updated
Affected versions
- ESET, spol. s r.o. ESET NOD32 Antivirus
From 11.2 · fixed in 15.1.12.0
- ESET, spol. s r.o. ESET Internet Security
From 11.2 · fixed in 15.1.12.0
- ESET, spol. s r.o. ESET Smart Security Premium
From 11.2 · fixed in 15.1.12.0
- ESET, spol. s r.o. ESET Endpoint Antivirus
From 6.0 · fixed in 8.0.2053.0
- ESET, spol. s r.o. ESET Endpoint Security
From 6.0 · fixed in 8.0.2053.0
- ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server
From 8.0 · fixed in 9.0.12012.0
- ESET, spol. s r.o. ESET File Security for Microsoft Windows Server
6.0 8.0.12013.0
- ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server
From 6.0 · fixed in 8.0.10020.0
- ESET, spol. s r.o. ESET Mail Security for IBM Domino
From 6.0 · fixed in 8.0.14011.0
- ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server
From 6.0 · fixed in 8.0.15009.0