CVE:CVE-2022-27167
CNNVD:CNNVD-202205-2726
ESET NOD32 Antivirus是斯洛伐克ESET公司的一套杀毒软件。
ESET NOD32 Antivirus 存在安全漏洞，攻击者利用该漏洞通过修复和卸载选项可升级权限。
solution:Upgrade eset endpoint_antivirus to a higher version than 8.0.2053.0,8.1.2050.0,9.0.2046.0,and avoid the version [6.0,8.0.2053.0),[8.1,8.1.2050.0),[9.0,9.0.2046.0); Upgrade eset endpoint_security to a higher version than 8.0.2053.0,8.1.2050.0,9.0.2046.0,and avoid the version [6.0,8.0.2053.0),[8.1,8.1.2050.0),[9.0,9.0.2046.0); Upgrade eset file_security to a higher version than 8.0.12013.0,and avoid the version [6.0,8.0.12013.0); Upgrade eset internet_security to a higher version than 15.1.12.0,and avoid the version [11.2,15.1.12.0); Upgrade eset mail_security to a higher version than 8.0.10020.0,8.0.14011.0,and avoid the version [6.0,8.0.10020.0),[6.0,8.0.14011.0); Upgrade eset nod32_antivirus to a higher version than 15.1.12.0,and avoid the version [11.2,15.1.12.0); Upgrade eset security to a higher version than 8.0.15009.0,and avoid the version [6.0,8.0.15009.0); Upgrade eset server_security to a higher version than 9.0.12012.0,and avoid the version [6.0,),[8.0,9.0.12012.0),no fixed version after 6.0; Upgrade eset smart_security to a higher version than 15.1.12.0,and avoid the version [11.2,15.1.12.0)