← CVE Intelligence

CVE-2022-27167

Arbitrary File Deletion in ESET products for Windows PUBLISHED

Description (CNA)

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.

Affected (CNA)

Vendor / productVersions
ESET, spol. s r.o. / ESET NOD32 Antivirusaffected 11.2 before 15.1.12.0
ESET, spol. s r.o. / ESET Internet Securityaffected 11.2 before 15.1.12.0
ESET, spol. s r.o. / ESET Smart Security Premiumaffected 11.2 before 15.1.12.0
ESET, spol. s r.o. / ESET Endpoint Antivirusaffected 6.0 before 9.0.2046.0
ESET, spol. s r.o. / ESET Endpoint Securityaffected 6.0 before 9.0.2046.0
ESET, spol. s r.o. / ESET Server Security for Microsoft Windows Serveraffected 8.0 before 9.0.12012.0
ESET, spol. s r.o. / ESET File Security for Microsoft Windows Serveraffected 6.0 8.0.12013.0
ESET, spol. s r.o. / ESET Mail Security for Microsoft Exchange Serveraffected 6.0 before 8.0.10020.0
ESET, spol. s r.o. / ESET Mail Security for IBM Dominoaffected 6.0 before 8.0.14011.0
ESET, spol. s r.o. / ESET Security for Microsoft SharePoint Serveraffected 6.0 before 8.0.15009.0

CWE

CWE-280

References

ADP enrichment

CVE

No English description supplied.