CVE-2021-37852
09.02.2022, 06:15
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.Enginsight
| Vendor | Product | Version |
|---|---|---|
| eset | endpoint_antivirus | 6.6.2046.0 ≤ 𝑥 < 7.3.2055.0 |
| eset | endpoint_antivirus | 8.0 ≤ 𝑥 < 8.0.2028.3 |
| eset | endpoint_antivirus | 8.1 ≤ 𝑥 < 8.1.2031.4 |
| eset | endpoint_antivirus | 9.0 ≤ 𝑥 < 9.0.2032.6 |
| eset | endpoint_security | 6.6.2046.0 ≤ 𝑥 < 7.3.2055.0 |
| eset | endpoint_security | 8.0 ≤ 𝑥 < 8.0.2028.3 |
| eset | endpoint_security | 8.1 ≤ 𝑥 < 8.1.2031.4 |
| eset | endpoint_security | 9.0 ≤ 𝑥 < 9.0.2032.6 |
| eset | file_security | 7.0.12014.0 ≤ 𝑥 ≤ 7.3.12006.0 |
| eset | internet_security | 10.0.337.1 ≤ 𝑥 < 15.0.18.0 |
| eset | mail_security | 7.0.10019 ≤ 𝑥 < 7.3.10014.0 |
| eset | mail_security | 7.0.14008.0 ≤ 𝑥 < 7.3.14003.0 |
| eset | mail_security | 8.0 ≤ 𝑥 < 8.0.14006.0 |
| eset | mail_security | 8.0.10012.0 ≤ 𝑥 < 8.0.10018.0 |
| eset | nod32_antivirus | 10.0.337.1 ≤ 𝑥 ≤ 15.0.18.0 |
| eset | security | 7.0.15008.0 ≤ 𝑥 ≤ 8.0.15004.0 |
| eset | server_security | 7.0.12016.1002 ≤ 𝑥 ≤ 7.2.12004.1000 |
| eset | server_security | 8.0.12003.0 |
| eset | server_security | 8.0.12003.1 |
| eset | smart_security | 10.0.337.1 ≤ 𝑥 ≤ 15.0.18.0 |
| eset | smart_security | 10.0.337.1 ≤ 𝑥 ≤ 15.0.18.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References