{"id":"CVE-2025-5028","state":"PUBLISHED","title":"Arbitrary file deletion vulnerability in ESET product installers","description":"Installation file of ESET security products on Windows \n\nallow an attacker to misuse to delete an arbitrary file without having the permissions to do so.","publishedAt":"2025-07-11T06:40:28.636Z","updatedAt":"2025-07-11T16:11:55.884Z","severity":{"score":6.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","source":"ESET"},"assigner":"ESET","products":["ESET, spol. s.r.o ESET NOD32 Antivirus","ESET, spol. s.r.o ESET Internet Security","ESET, spol. s.r.o ESET Smart Security Premium","ESET, spol. s.r.o ESET Security Ultimate","ESET, spol. s.r.o ESET Endpoint Antivirus for Windows","ESET, spol. s.r.o ESET Endpoint Security for Windows","ESET, spol. s.r.o ESET Small Business Security","ESET, spol. s.r.o ESET Safe Server"],"affected":[{"vendor":"ESET, spol. s.r.o","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Antivirus for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Small Business Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Safe Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]}],"references":["https://support.eset.com/en/ca8838-arbitrary-file-deletion-vulnerability-in-eset-product-installers-on-windows-fixed"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/5xxx/CVE-2025-5028.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-5028","state":"PUBLISHED","datePublished":"2025-07-11T06:40:28.636Z","dateUpdated":"2025-07-11T16:11:55.884Z","assignerShortName":"ESET","assignerOrgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateReserved":"2025-05-21T09:28:16.965Z"},"containers":{"cna":{"title":"Arbitrary file deletion vulnerability in ESET product installers","descriptions":[{"lang":"en","value":"Installation file of ESET security products on Windows \n\nallow an attacker to misuse to delete an arbitrary file without having the permissions to do so."}],"affected":[{"vendor":"ESET, spol. s.r.o","product":"ESET NOD32 Antivirus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Internet Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Smart Security Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Security Ultimate","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Antivirus for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Endpoint Security for Windows","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"12.0.2049.0","versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"11.1.2059.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Small Business Security","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]},{"vendor":"ESET, spol. s.r.o","product":"ESET Safe Server","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"18.1.13.0","versionType":"custom"}]}],"references":[{"url":"https://support.eset.com/en/ca8838-arbitrary-file-deletion-vulnerability-in-eset-product-installers-on-windows-fixed"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.8,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","description":"CWE-269 Improper Privilege Management","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ESET","orgId":"4a9b9929-2450-4021-b7b9-469a0255b215","dateUpdated":"2025-07-11T06:40:28.636Z"},"datePublic":"2025-07-09T10:00:00.000Z","impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-11T16:11:20.838647Z","id":"CVE-2025-5028","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-11T16:11:55.884Z"}}]}}}