NetSight
IP …
high7.8

CVE-2021-37852

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the contex…

Impact

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

Affected products

VendorProductAffected versions
EsetEndpoint Antivirus
from 6.6.2046.0 before 7.3.2055.0
from 8.0 before 8.0.2028.3
from 8.1 before 8.1.2031.4
from 9.0 before 9.0.2032.6
EsetEndpoint Security
from 6.6.2046.0 before 7.3.2055.0
from 8.0 before 8.0.2028.3
from 8.1 before 8.1.2031.4
from 9.0 before 9.0.2032.6
EsetFile Security
from 7.0.12014.0 through 7.3.12006.0
EsetInternet Security
from 10.0.337.1 before 15.0.18.0
EsetMail Security
from 7.0.10019 before 7.3.10014.0
from 7.0.14008.0 before 7.3.14003.0
from 8.0 before 8.0.14006.0
from 8.0.10012.0 before 8.0.10018.0
EsetNod32 Antivirus
from 10.0.337.1 through 15.0.18.0
EsetSecurity
from 7.0.15008.0 through 8.0.15004.0
EsetServer Security
from 7.0.12016.1002 through 7.2.12004.1000
Versions 8.0.12003.0, 8.0.12003.1
EsetSmart Security
from 10.0.337.1 through 15.0.18.0

Weakness classification

CWE-269

References