ESET File Security for Microsoft Windows Server 8.0 (released on January 12, 2022).ESET Server Security for Microsoft Windows Server 0.0 (released on December 16, 2021).

ESET Endpoint Antivirus for Windows and ESET Endpoint Security for Windows.

ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security, and ESET Smart Security 15.0.19.0 (released on December 8, 2021).

However, all of these accounts already have pretty high rights, thus the consequence of this issue is minimal.įurthermore, ESET has already developed a list of fixed products that are not susceptible, which is shown below: 'An attacker with SeImpersonatePrivilege access can use the AMSI scan function to raise privileges to NT AUTHORITY SYSTEM.'īy default, the local Administrators group and local device service accounts have access to SeImpersonatePrivilege.

ESET Mail Security for Microsoft Exchange Server from version 9 to 6.0.ESET Mail Security for IBM Domino from version 8.0 to 4.0.ESET Security for Microsoft SharePoint Server from version 8.0 to 4.0.ESET Server Security for Microsoft Azure from version 6.1002 to 4.1000.ESET Server Security for Microsoft Windows Server 3.0 and 3.1, ESET File Security for Microsoft Windows Server from version 4.0 to 6.0.ESET Endpoint Antivirus for Windows and ESET Endpoint Security for Windows from version.ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security, and ESET Smart Security Premium from version 10.0.337.1 to 15.0.18.0.FINDING CREDIT: Michael DePlante of Trend Micro’s Zero Day Initiative.Īll of ESET's impacted applications, along with their corresponding versions, are listed below:.DISCLOSURE TIMELINE: – Vulnerability reported to vendor & – Coordinated public release of advisory.DESCRIPTION: ESET Endpoint Antivirus Unnecessary Privileges Local Privilege Escalation Vulnerability.On November 18, 2021, cybersecurity experts at Zero Day Initiative (ZDI) detected and documented a vulnerability as 'CVE-2021-37852,' which is characterised as severe in terms of severity since it allows threat actors to exploit the AMSI scanning function. ESET has just released updates to address a local privilege escalation vulnerability discovered in all of its windows clients, which allows threat actors to escalate privileges and execute arbitrary code.

Eset endpoint security 7.3 full