CVE:CVE-2021-37852
CNNVD:CNNVD-202201-2720
ESET NOD32 Antivirus是斯洛伐克ESET公司的一套杀毒软件。
ESET NOD32 Antivirus 存在权限许可和访问控制问题漏洞，该漏洞源于产品没有在使用命名管道时适当地施加安全限制，从而导致安全限制被绕过和权限升级。该漏洞允许本地用户升级系统上的权限。
solution:Upgrade eset endpoint_antivirus to a higher version than 7.3.2055.0,8.0.2028.3,8.1.2031.4,9.0.2032.6,and avoid the version [6.6.2046.0,7.3.2055.0),[8.0,8.0.2028.3),[8.1,8.1.2031.4),[9.0,9.0.2032.6); Upgrade eset endpoint_security to a higher version than 7.3.2055.0,8.0.2028.3,8.1.2031.4,9.0.2032.6,and avoid the version [6.6.2046.0,7.3.2055.0),[8.0,8.0.2028.3),[8.1,8.1.2031.4),[9.0,9.0.2032.6); Upgrade eset file_security to a higher version than 7.3.12006.0,and avoid the version [7.0.12014.0,7.3.12006.0]; Upgrade eset internet_security to a higher version than 15.0.18.0,and avoid the version [10.0.337.1,15.0.18.0); Upgrade eset mail_security to a higher version than 7.3.10014.0,7.3.14003.0,8.0.14006.0,8.0.10018.0,and avoid the version [7.0.10019,7.3.10014.0),[7.0.14008.0,7.3.14003.0),[8.0,8.0.14006.0),[8.0.10012.0,8.0.10018.0); Upgrade eset nod32_antivirus to a higher version than 15.0.18.0,and avoid the version [10.0.337.1,15.0.18.0]; Upgrade eset security to a higher version than 8.0.15004.0,and avoid the version [7.0.15008.0,8.0.15004.0]; Upgrade eset server_security to a higher version than 7.2.12004.1000,8.0.12003.0,8.0.12003.1,and avoid the version [7.0.12016.1002,7.2.12004.1000],8.0.12003.0,8.0.12003.1; Upgrade eset smart_security to a higher version than 15.0.18.0,and avoid the version [10.0.337.1,15.0.18.0]