{"id":"CVE-2025-4952","state":"PUBLISHED","title":"Denial-of-service vulnerability in ESET security products for Windows","description":"Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.","publishedAt":"2025-10-31T12:28:15.267Z","updatedAt":"2025-10-31T14:18:16.911Z","severity":{"score":6.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","source":"ESET"},"assigner":"ESET","products":["ESET ESET NOD32 Antivirus","ESET ESET Internet Security","ESET ESET Smart Security Premium","ESET ESET Security Ultimate","ESET ESET Small Business Security","ESET ESET Safe Server","ESET ESET Endpoint Antivirus","ESET ESET Endpoint Security for Windows","ESET ESET Server Security for Windows Server","ESET ESET Mail Security for Microsoft Exchange Server","ESET ESET Mail Security for IBM Domino","ESET ESET Security for Microsoft SharePoint Server","ESET ESET File Security for Microsoft Azure"],"affected":[{"vendor":"ESET","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["hips"],"platforms":["Windows"]},{"vendor":"ESET","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Small Business Security","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Safe Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Endpoint Antivirus","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Server Security for Windows Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Mail Security for Microsoft Exchange Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Mail Security for IBM Domino","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Security for Microsoft SharePoint Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET File Security for Microsoft Azure","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]}],"references":["https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed"],"weaknesses":["CWE-732"],"ingestedAt":"2026-10-29T20:09:23.771Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/4xxx/CVE-2025-4952.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-4952","state":"PUBLISHED","datePublished":"2025-10-31T12:28:15.267Z","dateUpdated":"2025-10-31T14:18:16.911Z","assignerShortName":"ESET","assignerOrgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateReserved":"2025-05-19T10:36:38.958Z"},"containers":{"cna":{"title":"Denial-of-service vulnerability in ESET security products for Windows","descriptions":[{"lang":"en","value":"Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration."}],"affected":[{"vendor":"ESET","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["hips"],"platforms":["Windows"]},{"vendor":"ESET","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Small Business Security","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Safe Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Endpoint Antivirus","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Server Security for Windows Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Mail Security for Microsoft Exchange Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Mail Security for IBM Domino","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET Security for Microsoft SharePoint Server","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]},{"vendor":"ESET","product":"ESET File Security for Microsoft Azure","defaultStatus":"unaffected","versions":[{"version":"1496","status":"unaffected","versionType":"custom"}],"modules":["HIPS support module"]}],"references":[{"url":"https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.8,"baseSeverity":"MEDIUM","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-732","description":"CWE-732 Incorrect Permission Assignment for Critical Resource","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ESET","orgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateUpdated":"2025-10-31T12:28:15.267Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_nod32_antivirus:1496:*:windows:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_internet_security:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_smart_security_premium:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_security_ultimate:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_small_business_security:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_safe_server:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_endpoint_antivirus:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_endpoint_security_for_windows:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_server_security_for_windows_server:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_mail_security_for_microsoft_exchange_server:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_mail_security_for_ibm_domino:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_security_for_microsoft_sharepoint_server:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:eset:eset_file_security_for_microsoft_azure:1496:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"OR"}],"datePublic":"2025-08-22T10:00:00.000Z","impacts":[{"capecId":"CAPEC-203","descriptions":[{"lang":"en","value":"CAPEC-203 Manipulate Registry Information"}]}],"source":{"advisory":"ca8853","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.4.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-31T14:18:06.194469Z","id":"CVE-2025-4952","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-31T14:18:16.911Z"}}]}}}