Description (CNA)
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ESET / ESET NOD32 Antivirus | affected 10.0.337.1 through 15.0.18.0 |
| ESET / ESET Internet Security | affected 10.0.337.1 through 15.0.18.0 |
| ESET / ESET Smart Security | affected 10.0.337.1 through 15.0.18.0 |
| ESET / ESET Endpoint Antivirus for Windows | affected 6.6.2046.0 through 9.0.2032.4 |
| ESET / ESET Endpoint Security for Windows | affected 6.6.2046.0 through 9.0.2032.4 |
| ESET / ESET Server Security for Microsoft Windows Server | affected 8.0.12003.0 through 8.0.12003.1 |
| ESET / ESET File Security for Microsoft Windows Server | affected 7.0.12014.0 through 7.3.12006.0 |
| ESET / ESET Server Security for Microsoft Azure | affected 7.0.12016.1002 through 7.2.12004.1000 |
| ESET / ESET Security for Microsoft SharePoint Server | affected 7.0.15008.0 through 8.0.15004.0 |
| ESET / ESET Mail Security for IBM Domino | affected 7.0.14008.0 through 8.0.14004.0 |
| ESET / ESET Mail Security for Microsoft Exchange Server | affected 7.0.10019 through 8.0.10016.0 |
CWE
No CWE identifiers supplied.
References
- https://support.eset.com/en/ca8223-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows
- https://www.zerodayinitiative.com/advisories/ZDI-22-148/
ADP enrichment
No English description supplied.