Vulnerability · Published Nov 8, 2021 · Assigned by ESET
CVE-2021-37850Denial of service in ESET for Mac products
Medium 5.5
In plain English
A medium-severity security flaw in ESET Cyber Security from ESET, spol. s r.o.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 86.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s r.o. | ESET Cyber Security | unspecified – through 6.10.700 |
| ESET, spol. s r.o. | ESET Cyber Security Pro | unspecified – before 6.10.700 |
| ESET, spol. s r.o. | ESET Endpoint Antivirus for macOS | unspecified – before 6.10.910.0 |
| ESET, spol. s r.o. | ESET Endpoint Security for macOS | unspecified – before 6.10.910.0 |
References
- https://support.eset.com/en/ca8151 x_refsource_MISC