EUVD-2021-24330

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Local privilege escalation in ESET Windows products allows higher privilege malicious code execution.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2021-37851	9 May 202213:00	–	attackerkb
BDU FSTEC	The vulnerability of the recovery function of the ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, and ESET Security for Microsoft SharePoint Server allows a perpetrator to execute arbitrary code.	23 May 202200:00	–	bdu_fstec
CNNVD	多款ESET产品安全漏洞	10 May 202200:00	–	cnnvd
CVE	CVE-2021-37851	11 May 202214:08	–	cve
Cvelist	CVE-2021-37851 Local Privilege Escalation in ESET product for Windows	11 May 202214:08	–	cvelist
NVD	CVE-2021-37851	11 May 202215:15	–	nvd
OSV	CVE-2021-37851	11 May 202215:15	–	osv
Prion	Design/Logic Flaw	11 May 202215:15	–	prion
Positive Technologies	PT-2022-2607	9 May 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2021-37851: Improper Handling of Insufficient Permissions or Privileges	11 May 202200:00	–	rapid7

[
  {
    "enisaIdVendor": [
      {
        "id": "6072b169-91aa-3ed4-88a6-f718a4889edb",
        "vendor": {
          "name": "ESET, spol. s r.o."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "006c4ccb-c7d6-3340-bb99-e70f1a331925",
        "product": {
          "name": "ESET Mail Security for Microsoft Exchange Server"
        },
        "product_version": "6.0 <8.0.10020.0"
      },
      {
        "id": "28d6c1da-1d27-3cc9-8313-e44405e4a11a",
        "product": {
          "name": "ESET Security for Microsoft SharePoint Server"
        },
        "product_version": "6.0 <8.0.15009.0"
      },
      {
        "id": "3abe98db-5854-3203-ac28-4520635248c0",
        "product": {
          "name": "ESET Internet Security"
        },
        "product_version": "11.2 <15.1.12.0"
      },
      {
        "id": "4e58b354-a4c5-3985-943b-7a0aa1efe024",
        "product": {
          "name": "ESET Smart Security Premium"
        },
        "product_version": "11.2 <15.1.12.0"
      },
      {
        "id": "622fc5ea-9b59-3bc9-bcbd-4548d3cea57a",
        "product": {
          "name": "ESET Endpoint Antivirus"
        },
        "product_version": "6.0 <9.0.2046.0"
      },
      {
        "id": "b0d30967-3228-3324-83b5-28e3b8d54337",
        "product": {
          "name": "ESET Mail Security for IBM Domino"
        },
        "product_version": "6.0 <8.0.14011.0"
      },
      {
        "id": "c9242c0b-baeb-3a8a-beea-c92afc96148a",
        "product": {
          "name": "ESET Endpoint Security"
        },
        "product_version": "6.0 <9.0.2046.0"
      },
      {
        "id": "e3df0b50-ad93-3cb6-b9aa-da33a9833826",
        "product": {
          "name": "ESET File Security for Microsoft Windows Server"
        },
        "product_version": "6.0 8.0.12013.0"
      },
      {
        "id": "e4c98085-e83c-314e-b8cb-d804c1b05500",
        "product": {
          "name": "ESET Server Security for Microsoft Windows Server"
        },
        "product_version": "8.0 <9.0.12012.0"
      },
      {
        "id": "fc3aab03-696f-34d7-ad71-ac6e3b652621",
        "product": {
          "name": "ESET NOD32 Antivirus"
        },
        "product_version": "11.2 <15.1.12.0"
      }
    ]
  }
]

Source	Link
support	www.support.eset.com/en/ca8268
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.3 - 7.8

CVSS 27.2

EPSS0.00208