Local Privilege Escalation in ESET product for Windows
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ESET NOD32 Antivirus
Vendor
ESET, spol. s r.o.
Product
ESET NOD32 Antivirus
Platforms
Unknown
Default status
Unknown
ESET NOD32 Antivirus · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.2
affected
custom
15.1.12.0
Unavailable
None listed
ESET Internet Security
Vendor
ESET, spol. s r.o.
Product
ESET Internet Security
Platforms
Unknown
Default status
Unknown
ESET Internet Security · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.2
affected
custom
15.1.12.0
Unavailable
None listed
ESET Smart Security Premium
Vendor
ESET, spol. s r.o.
Product
ESET Smart Security Premium
Platforms
Unknown
Default status
Unknown
ESET Smart Security Premium · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.2
affected
custom
15.1.12.0
Unavailable
None listed
ESET Endpoint Antivirus
Vendor
ESET, spol. s r.o.
Product
ESET Endpoint Antivirus
Platforms
Unknown
Default status
Unknown
ESET Endpoint Antivirus · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0
affected
custom
9.0.2046.0
Unavailable
8.1.2050.0 → unaffected
8.0.2053.0 → unaffected
ESET Endpoint Security
Vendor
ESET, spol. s r.o.
Product
ESET Endpoint Security
Platforms
Unknown
Default status
Unknown
ESET Endpoint Security · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0
affected
custom
9.0.2046.0
Unavailable
8.1.2050.0 → unaffected
8.0.2053.0 → unaffected
ESET Server Security for Microsoft Windows Server
Vendor
ESET, spol. s r.o.
Product
ESET Server Security for Microsoft Windows Server
Platforms
Unknown
Default status
Unknown
ESET Server Security for Microsoft Windows Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0
affected
custom
9.0.12012.0
Unavailable
None listed
ESET File Security for Microsoft Windows Server
Vendor
ESET, spol. s r.o.
Product
ESET File Security for Microsoft Windows Server
Platforms
Unknown
Default status
Unknown
ESET File Security for Microsoft Windows Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0 8.0.12013.0
affected
Unavailable
Unavailable
Unavailable
None listed
ESET Mail Security for Microsoft Exchange Server
Vendor
ESET, spol. s r.o.
Product
ESET Mail Security for Microsoft Exchange Server
Platforms
Unknown
Default status
Unknown
ESET Mail Security for Microsoft Exchange Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0
affected
custom
8.0.10020.0
Unavailable
None listed
ESET Mail Security for IBM Domino
Vendor
ESET, spol. s r.o.
Product
ESET Mail Security for IBM Domino
Platforms
Unknown
Default status
Unknown
ESET Mail Security for IBM Domino · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0
affected
custom
8.0.14011.0
Unavailable
None listed
ESET Security for Microsoft SharePoint Server
Vendor
ESET, spol. s r.o.
Product
ESET Security for Microsoft SharePoint Server
Platforms
Unknown
Default status
Unknown
ESET Security for Microsoft SharePoint Server · Scoped product and version facts