What is CVE-2021-37851?

CVE-2021-37851 is a high-severity vulnerability in Eset Endpoint_antivirus, classified under Improper Handling of Insufficient Permissions or Privileges. CVSS score: 7.3/10. Published 2022-05-11.

How severe is CVE-2021-37851?

High severity. CVSS v3 base score is 7.3 out of 10.

Vulnerability in Eset Endpoint_antivirus

CVE-2021-37851

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Ant…

EPSS: 0.002 (9.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Eset Endpoint_antivirus
Eset Endpoint_security
Eset File_security
Eset Internet_security
Eset Mail_security
Eset Nod32_antivirus
Eset Security
Eset Server_security
Eset Smart_security
Eset, Spol. S R.o. Eset Endpoint Antivirus — versions 6.0

Weakness classification (CWE)

CWE-280 — Improper Handling of Insufficient Permissions or Privileges
CWE-755 — Improper Handling of Exceptional Conditions

References

security@eset.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-37851?: CVE-2021-37851 is a high-severity vulnerability in Eset Endpoint_antivirus, classified under Improper Handling of Insufficient Permissions or Privileges. CVSS score: 7.3/10. Published 2022-05-11.
How severe is CVE-2021-37851?: High severity. CVSS v3 base score is 7.3 out of 10.