The vulnerability of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET NOD32 Antivirus Business Edition, ESET Smart Security Business Edition, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Kerio, and ESET Security for Microsoft SharePoint Server lies in a lack of standard permission mechanisms, allowing attackers to re-record arbitrary files.

🗓️ 03 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

ESET products risk from missing standard permissions enabling file rewriting when Self Defense is inactive.

Reporter	Title	Published	Views	Family All 8
CNNVD	ESET NOD32 Antivirus Access Control Error Vulnerability	20 Jan 202100:00	–	cnnvd
CVE	CVE-2020-26941	21 Jan 202114:35	–	cve
Cvelist	CVE-2020-26941	21 Jan 202114:35	–	cvelist
EUVD	EUVD-2020-19467	7 Oct 202500:30	–	euvd
NVD	CVE-2020-26941	26 Jan 202118:15	–	nvd
OSV	CVE-2020-26941	26 Jan 202118:15	–	osv
Prion	Arbitrary file deletion	26 Jan 202118:15	–	prion
RedhatCVE	CVE-2020-26941	22 May 202515:24	–	redhatcve

Vulners

Node

eset_software eset_nod32Range≤13.2

OR

eset_software eset_internet_securityRange≤13.2

OR

eset_software eset_smart_securityRange≤13.2

OR

eset_software eset_smart_security_premiumRange≤13.2

OR

eset_software eset_endpoint_antivirusRange≤7.3

OR

eset_software eset_endpoint_securityRange≤7.3

OR

eset_software eset_nod32_antivirus_business_editionRange≤7.3

OR

eset_software eset_smart_security_business_editionRange≤7.3

OR

eset_software eset_file_security_for_microsoft_windows_serverRange≤7.2

OR

eset_software eset_mail_security_for_microsoft_exchange_serverRange≤7.2

OR

eset_software eset_mail_security_for_ibm_dominoRange≤7.2

OR

eset_software eset_security_for_kerioRange≤7.2

OR

eset_software eset_security_for_microsoft_sharepoint_serverRange≤7.2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26941
support	www.support.eset.com/en/ca7794-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows
web	www.web.nvd.nist.gov/view/vuln/detail

03 Mar 2021 00:00Current

6Medium risk

Vulners AI Score6

CVSS 24.6

CVSS 35.5

EPSS0.00332

ESET products missing standard permissions file rewriting Self Defense inactive