CVE:CVE-2021-37851
CNNVD:CNNVD-202205-2727
ESET Smart Security Premium等都是斯洛伐克ESET公司的产品。Smart Security Premium是一套杀毒软件。Internet Security是一套针对互联网安全的杀毒软件。Eset Endpoint Antivirus等都是斯洛伐克Eset公司的产品。Eset Endpoint Antivirus是一个适用于中小型和大型企业的内部部署和基于云的反恶意软件和安全套件。
ESET NOD32 Antivirus存在安全漏洞。攻击者利用该漏洞通过修复和卸载选项可绕过ESET NOD32 Antivirus的限制，以提升权限。
solution:Upgrade eset endpoint_antivirus to a higher version than 8.0.2053.0,8.1.2050.0,9.0.2046.0,and avoid the version [6.0,8.0.2053.0),[8.1,8.1.2050.0),[9.0,9.0.2046.0); Upgrade eset endpoint_security to a higher version than 8.0.2053.0,8.1.2050.0,9.0.2046.0,and avoid the version [6.0,8.0.2053.0),[8.1,8.1.2050.0),[9.0,9.0.2046.0); Upgrade eset file_security to a higher version than 8.0.12013.0,and avoid the version [6.0,8.0.12013.0); Upgrade eset internet_security to a higher version than 15.1.12.0,and avoid the version [11.2,15.1.12.0); Upgrade eset mail_security to a higher version than 8.0.10020.0,8.0.14011.0,and avoid the version [6.0,8.0.10020.0),[6.0,8.0.14011.0); Upgrade eset nod32_antivirus to a higher version than 15.1.12.0,and avoid the version [11.2,15.1.12.0); Upgrade eset security to a higher version than 8.0.15009.0,and avoid the version [6.0,8.0.15009.0); Upgrade eset server_security to a higher version than 9.0.12012.0,and avoid the version [6.0,),[8.0,9.0.12012.0),no fixed version after 6.0; Upgrade eset smart_security to a higher version than 15.1.12.0,and avoid the version [11.2,15.1.12.0)