CVE-2021-37852

Published: Feb 9, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Affected (21)

Products: Eset: Endpoint Antivirus, Endpoint Security, File Security, Internet Security, Mail Security, Nod32 Antivirus, Security, Server Security, Smart Security

9 products

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Eset Endpoint Antivirus	6.6.2046.0 ≤ version < 7.3.2055.0
Eset Endpoint Antivirus	8.0 ≤ version < 8.0.2028.3
Eset Endpoint Antivirus	8.1 ≤ version < 8.1.2031.4
Eset Endpoint Antivirus	9.0 ≤ version < 9.0.2032.6
Eset Endpoint Security	6.6.2046.0 ≤ version < 7.3.2055.0
Eset Endpoint Security	8.0 ≤ version < 8.0.2028.3
Eset Endpoint Security	8.1 ≤ version < 8.1.2031.4
Eset Endpoint Security	9.0 ≤ version < 9.0.2032.6
Eset File Security	7.0.12014.0 ≤ version ≤ 7.3.12006.0
Eset Internet Security	10.0.337.1 ≤ version < 15.0.18.0
Eset Mail Security	7.0.14008.0 ≤ version < 7.3.14003.0
Eset Mail Security	8.0 ≤ version < 8.0.14006.0
Eset Mail Security	7.0.10019 ≤ version < 7.3.10014.0
Eset Mail Security	8.0.10012.0 ≤ version < 8.0.10018.0
Eset Nod32 Antivirus	10.0.337.1 ≤ version ≤ 15.0.18.0
Eset Security	7.0.15008.0 ≤ version ≤ 8.0.15004.0
Eset Server Security	7.0.12016.1002 ≤ version ≤ 7.2.12004.1000
Eset Server Security	Version 8.0.12003.0
Eset Server Security	Version 8.0.12003.1
Eset Smart Security	10.0.337.1 ≤ version ≤ 15.0.18.0
Eset Smart Security	10.0.337.1 ≤ version ≤ 15.0.18.0