{"id":"CVE-2025-2425","state":"PUBLISHED","title":"TOCTOU race condition vulnerability in ESET products on Windows","description":"Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.","publishedAt":"2025-07-18T09:20:52.051Z","updatedAt":"2025-07-18T11:37:03.044Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","source":"ESET"},"assigner":"ESET","products":["ESET, spol. s.r.o ESET NOD32 Antivirus","ESET, spol. s.r.o ESET Internet Security","ESET, spol. s.r.o ESET Smart Security Premium","ESET, spol. s.r.o ESET Security Ultimate","ESET, spol. s.r.o ESET Endpoint Antivirus for Windows","ESET, spol. s.r.o ESET Endpoint Security for Windows","ESET, spol. s.r.o ESET Small Business Security","ESET, spol. s.r.o ESET Safe Server","ESET, spol. s.r.o ESET Server Security for Windows Server","ESET, spol. s.r.o ESET Mail Security for Microsoft Exchange Server","ESET, spol. s.r.o ESET Security for Microsoft SharePoint Server"],"affected":[{"vendor":"ESET, spol. s.r.o","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Antivirus for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Small Business Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Safe Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Server Security for Windows Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.12004.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.12009.1","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Mail Security for Microsoft Exchange Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.10003.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.10011.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Security for Microsoft SharePoint Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.15004.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.15003.0","versionType":"custom"}]}],"references":["https://support.eset.com/en/ca8840-eset-customer-advisory-toctou-race-condition-vulnerability-in-eset-products-on-windows-fixed"],"weaknesses":["CWE-367"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/2xxx/CVE-2025-2425.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-2425","state":"PUBLISHED","datePublished":"2025-07-18T09:20:52.051Z","dateUpdated":"2025-07-18T11:37:03.044Z","assignerShortName":"ESET","assignerOrgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateReserved":"2025-03-17T14:49:00.303Z"},"containers":{"cna":{"title":"TOCTOU race condition vulnerability in ESET products on Windows","descriptions":[{"lang":"en","value":"Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system."}],"affected":[{"vendor":"ESET, spol. s.r.o","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Antivirus for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Small Business Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Safe Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Server Security for Windows Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.12004.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.12009.1","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Mail Security for Microsoft Exchange Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.10003.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.10011.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Security for Microsoft SharePoint Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.15004.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.15003.0","versionType":"custom"}]}],"references":[{"url":"https://support.eset.com/en/ca8840-eset-customer-advisory-toctou-race-condition-vulnerability-in-eset-products-on-windows-fixed"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":5.1,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-367","description":"CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ESET","orgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateUpdated":"2025-07-18T09:20:52.051Z"},"datePublic":"2025-07-16T10:00:00.000Z","impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"source":{"advisory":"ca8840","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-18T11:36:44.282751Z","id":"CVE-2025-2425","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-18T11:37:03.044Z"}}]}}}