Vulnerability · Published May 10, 2022 · Assigned by ESET
CVE-2022-27167Arbitrary File Deletion in ESET products for Windows
High 7.1
In plain English
A high-severity security flaw in ESET Endpoint Antivirus from ESET, spol. s r.o.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | 11.2 – before 15.1.12.0 |
| ESET, spol. s r.o. | ESET Internet Security | 11.2 – before 15.1.12.0 |
| ESET, spol. s r.o. | ESET Smart Security Premium | 11.2 – before 15.1.12.0 |
| ESET, spol. s r.o. | ESET Endpoint Antivirus | 6.0 – before 9.0.2046.0 |
| ESET, spol. s r.o. | ESET Endpoint Security | 6.0 – before 9.0.2046.0 |
| ESET, spol. s r.o. | ESET Server Security for Microsoft Windows Server | 8.0 – before 9.0.12012.0 |
| ESET, spol. s r.o. | ESET File Security for Microsoft Windows Server | 6.0 8.0.12013.0 |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | 6.0 – before 8.0.10020.0 |
| ESET, spol. s r.o. | ESET Mail Security for IBM Domino | 6.0 – before 8.0.14011.0 |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | 6.0 – before 8.0.15009.0 |
Weakness: CWE-280 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
References
- https://support.eset.com/en/ca8268 x_refsource_MISC