CVE-2021-37852— LPE in ESET products for Windows
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-37852
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
LPE in ESET products for Windows
Source: NVD (National Vulnerability Database)
Vulnerability Description
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ESET NOD32 Antivirus 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ESET NOD32 Antivirus是斯洛伐克ESET公司的一套杀毒软件。 ESET NOD32 Antivirus 存在权限许可和访问控制问题漏洞，该漏洞源于产品没有在使用命名管道时适当地施加安全限制，从而导致安全限制被绕过和权限升级。该漏洞允许本地用户升级系统上的权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ESET | ESET NOD32 Antivirus | 10.0.337.1 ~ 15.0.18.0 | - | |
| ESET | ESET Internet Security | 10.0.337.1 ~ 15.0.18.0 | - | |
| ESET | ESET Smart Security | 10.0.337.1 ~ 15.0.18.0 | - | |
| ESET | ESET Endpoint Antivirus for Windows | 6.6.2046.0 ~ 9.0.2032.4 | - | |
| ESET | ESET Endpoint Security for Windows | 6.6.2046.0 ~ 9.0.2032.4 | - | |
| ESET | ESET Server Security for Microsoft Windows Server | 8.0.12003.0 ~ 8.0.12003.1 | - | |
| ESET | ESET File Security for Microsoft Windows Server | 7.0.12014.0 ~ 7.3.12006.0 | - | |
| ESET | ESET Server Security for Microsoft Azure | 7.0.12016.1002 ~ 7.2.12004.1000 | - | |
| ESET | ESET Security for Microsoft SharePoint Server | 7.0.15008.0 ~ 8.0.15004.0 | - | |
| ESET | ESET Mail Security for IBM Domino | 7.0.14008.0 ~ 8.0.14004.0 | - | |
| ESET | ESET Mail Security for Microsoft Exchange Server | 7.0.10019 ~ 8.0.10016.0 | - |
II. Public POCs for CVE-2021-37852
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-37852
请登录查看更多情报信息。
- https://www.zerodayinitiative.com/advisories/ZDI-22-148/x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-37852
IV. Related Vulnerabilities
Same product: ESET NOD32 Antivirus
- CVE-2025-4952
Denial-of-service vulnerability in ESET security products fo - CVE-2025-2425
TOCTOU race condition vulnerability in ESET products on Wind - CVE-2025-5028
Arbitrary file deletion vulnerability in ESET product instal - CVE-2024-11859
DLL Search Order Hijacking in ESET products for Windows - CVE-2024-7400
Local privilege escalation in ESET products for Windows
V. Comments for CVE-2021-37852
No comments yet