← Back

CVE-2022-27167

nvd nist
Published: May 10, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Affected (15)

Eset
9 products
Endpoint Antivirus
Endpoint Security
File Security
Internet Security
Mail Security
Nod32 Antivirus
Security
Server Security
Smart Security
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Eset
Endpoint Antivirus
From 6.0 to 8.0.2053.0
Endpoint Antivirus
From 8.1 to 8.1.2050.0
Endpoint Antivirus
From 9.0 to 9.0.2046.0
Eset
Endpoint Security
From 6.0 to 8.0.2053.0
Endpoint Security
From 8.1 to 8.1.2050.0
Endpoint Security
From 9.0 to 9.0.2046.0
File Security
From 6.0 to 8.0.12013.0
Internet Security
From 11.2 to 15.1.12.0
Eset
Mail Security
From 6.0 to 8.0.14011.0
Mail Security
From 6.0 to 8.0.10020.0
Nod32 Antivirus
From 11.2 to 15.1.12.0
Security
From 6.0 to 8.0.15009.0
Eset
Server Security
From 6.0
Server Security
From 8.0 to 9.0.12012.0
Smart Security
From 11.2 to 15.1.12.0

Related CWEs

CWE-280
Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.
CWE-755
Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.

References (2)

Source: security@eset.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.