LPE in ESET products for Windows
CVE-2021-37852

7.8HIGH

Key Information:

Vendor

Eset

Status
Eset Nod32 Antivirus
Eset Internet Security
Eset Smart Security
Eset Endpoint Antivirus For Windows
Vendor
CVE Published:
9 February 2022

What is CVE-2021-37852?

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Affected Version(s)

ESET Endpoint Antivirus for Windows 6.6.2046.0 <= 9.0.2032.4

ESET Endpoint Security for Windows 6.6.2046.0 <= 9.0.2032.4

ESET File Security for Microsoft Windows Server 7.0.12014.0 <= 7.3.12006.0

References

https://support.eset.com/en/ca8223-local-privilege-escala...
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-148/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative
JSON
.