← CVE Intelligence

CVE-2025-5028

Arbitrary file deletion vulnerability in ESET product installers PUBLISHED

Description (CNA)

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so.

Affected (CNA)

Vendor / productVersions
ESET, spol. s.r.o / ESET NOD32 Antivirusaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Internet Securityaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Smart Security Premiumaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Security Ultimateaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Endpoint Antivirus for Windowsaffected 0 through 12.0.2049.0; affected 0 through 11.1.2059.0
ESET, spol. s.r.o / ESET Endpoint Security for Windowsaffected 0 through 12.0.2049.0; affected 0 through 11.1.2059.0
ESET, spol. s.r.o / ESET Small Business Securityaffected 0 through 18.1.13.0
ESET, spol. s.r.o / ESET Safe Serveraffected 0 through 18.1.13.0

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.