CVE-2021-37852

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITYSYSTEM.

Link	Resource
https://www.zerodayinitiative.com/advisories/ZDI-22-148/	Third Party Advisory VDB Entry
https://support.eset.com/en/ca8223-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows	Vendor Advisory

Configuration 1

cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:* cpe:2.3:a:eset:mail_security:*:*:*:*:*:domino:*:* cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:* cpe:2.3:a:eset:mail_security:*:*:*:*:*:exchange_server:*:* cpe:2.3:a:eset:internet_security:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_security:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:server_security:8.0.12003.1:*:*:*:*:windows_server:*:* cpe:2.3:a:eset:server_security:8.0.12003.0:*:*:*:*:windows_server:*:* cpe:2.3:a:eset:security:*:*:*:*:*:sharepoint:*:* cpe:2.3:a:eset:server_security:*:*:*:*:azure:*:*:* cpe:2.3:a:eset:file_security:*:*:*:*:*:windows_server:*:* cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:windows:*:* cpe:2.3:a:eset:smart_security:*:*:*:*:-:windows:*:* cpe:2.3:a:eset:smart_security:*:*:*:*:premium:windows:*:*

---

Published : 2022-02-09 06:15

Updated : 2022-07-12 05:42

---

NVD link : CVE-2021-37852

Mitre link : CVE-2021-37852

Eset

Smart Security

CWE-269