Description
Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ESET, spol. s r.o. ESET NOD32 Antivirus
Default version status: unaffected
0 to ≤ 16.2.15.0affected
ESET, spol. s r.o. ESET Internet Security
Default version status: unaffected
0 to ≤ 16.2.15.0affected
ESET, spol. s r.o. ESET Smart Security Premium
Default version status: unaffected
0 to ≤ 16.2.15.0affected
ESET, spol. s r.o. ESET Security Ultimate
Default version status: unaffected
0 to ≤ 16.2.15.0affected
ESET, spol. s r.o. ESET Endpoint Antivirus for Windows
Default version status: unaffected
0 to ≤ 10.1.2058.0affected0 to ≤ 10.0.2049.0affected0 to ≤ 9.1.2066.0affected0 to ≤ 8.1.2052.0affected
ESET, spol. s r.o. ESET Endpoint Security for Windows
Default version status: unaffected
0 to ≤ 10.1.2058.0affected0 to ≤ 10.0.2049.0affected0 to ≤ 9.1.2066.0affected0 to ≤ 8.1.2052.0affected
ESET, spol. s r.o. ESET Server Security for Windows Server
Default version status: unaffected
0 to ≤ 10.0.12014.0affected0 to ≤ 9.0.12018.0affected0 to ≤ 8.0.12015.0affected0 to ≤ 7.3.12011.0affected
ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server
Default version status: unaffected
0 to ≤ 10.1.10010.0affected0 to ≤ 10.0.10017.0affected0 to ≤ 9.0.10011.0affected0 to ≤ 8.0.10022.0affected0 to ≤ 7.3.10014.0affected
ESET, spol. s r.o. ESET Mail Security for IBM Domino
Default version status: unaffected
0 to ≤ 10.0.14006.0affected0 to ≤ 9.0.14007.0affected0 to ≤ 8.0.14010.0affected0 to ≤ 7.3.14004.0affected
ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server
Default version status: unaffected
0 to ≤ 10.0.15004.0affected0 to ≤ 9.0.15005.0affected0 to ≤ 8.0.15011.0affected0 to ≤ 7.3.15004.0affected
ESET, spol. s r.o. ESET File Security for Microsoft Azure
Default version status: unaffected
0 to ≤ all versionsaffected
References
- https://support.eset.com/en/ca8612-eset-customer-advisory-link-following-local-privilege-escalation-vulnerability-in-eset-products-for-windows-fixed ↗
- https://packetstormsecurity.com/files/182464/ESET-NOD32-Antivirus-18.0.12.0-Unquoted-Service-Path.html ↗
- https://packetstormsecurity.com/files/179495/ESET-NOD32-Antivirus-17.2.7.0-Unquoted-Service-Path.html ↗
- https://www.exploit-db.com/exploits/51351 ↗
- https://www.exploit-db.com/exploits/51964 ↗