CVE-2021-37852: ESET Endpoint Antivirus Unnecessary Privileges Local Privilege Escalation Vulnerability
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of ESET Endpoint Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the use of named pipes. The issue results from allowing an untrusted process to impersonate the client of a pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37852?
CVE-2021-37852 is a vulnerability in ESET Endpoint Antivirus that allows local attackers to escalate privileges on affected installations.
How severe is CVE-2021-37852?
CVE-2021-37852 has a severity rating of 7.8, which is considered high.
Which software versions are affected by CVE-2021-37852?
CVE-2021-37852 affects ESET Endpoint Antivirus versions 6.6.2046.0 to 7.3.2055.0, versions 8.0 to 8.0.2028.3, versions 8.1 to 8.1.2031.4, and version 9.0.2032.6.
How can I fix CVE-2021-37852?
To fix CVE-2021-37852, update ESET Endpoint Antivirus to the latest version available from the official ESET website.
Where can I find more information about CVE-2021-37852?
More information about CVE-2021-37852 can be found on the official ESET support page and the Zero Day Initiative advisories page.