CVE-2021-37852

Published: Feb 9, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Affected (21)

Products: Eset: Endpoint Antivirus, Endpoint Security, File Security, Internet Security, Mail Security, Nod32 Antivirus, Security, Server Security, Smart Security

9 products

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Eset Endpoint Antivirus	From 6.6.2046.0 to 7.3.2055.0
Eset Endpoint Antivirus	From 8.0 to 8.0.2028.3
Eset Endpoint Antivirus	From 8.1 to 8.1.2031.4
Eset Endpoint Antivirus	From 9.0 to 9.0.2032.6
Eset Endpoint Security	From 6.6.2046.0 to 7.3.2055.0
Eset Endpoint Security	From 8.0 to 8.0.2028.3
Eset Endpoint Security	From 8.1 to 8.1.2031.4
Eset Endpoint Security	From 9.0 to 9.0.2032.6
Eset File Security	From 7.0.12014.0 to 7.3.12006.0
Eset Internet Security	From 10.0.337.1 to 15.0.18.0
Eset Mail Security	From 7.0.14008.0 to 7.3.14003.0
Eset Mail Security	From 8.0 to 8.0.14006.0
Eset Mail Security	From 7.0.10019 to 7.3.10014.0
Eset Mail Security	From 8.0.10012.0 to 8.0.10018.0
Eset Nod32 Antivirus	From 10.0.337.1 to 15.0.18.0
Eset Security	From 7.0.15008.0 to 8.0.15004.0
Eset Server Security	From 7.0.12016.1002 to 7.2.12004.1000
Eset Server Security	Version 8.0.12003.0
Eset Server Security	Version 8.0.12003.1
Eset Smart Security	From 10.0.337.1 to 15.0.18.0
Eset Smart Security	From 10.0.337.1 to 15.0.18.0