Permissions, Privileges, and Access Controls in Eset products - CVE-2021-37852

Vulnerability identifier: #VU60263

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2021-37852

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Eset

Affected software:
NOD32
ESET Internet Security
ESET Smart Security
ESET Smart Security Premium
ESET Endpoint Antivirus for Windows
ESET Endpoint Security for Windows
ESET Server Security for Microsoft Windows Server
ESET File Security for Microsoft Windows Server
ESET Security for Microsoft SharePoint Server
ESET Mail Security for IBM Domino
ESET Mail Security for Microsoft Exchange Server

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions within the use of named pipes, which leads to security restrictions bypass and privilege escalation.

Install updates from vendor's website.

• https://www.zerodayinitiative.com/advisories/ZDI-22-148/
• https://support.eset.com/en/ca8223-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows