Medium severity · published Nov 8, 2021
CVE-2021-37850
ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling…
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cyber Security · Eset
through 6.10.700; through 6.10.700 · source: NVD
EA
Endpoint Antivirus · Eset
through 6.10.910.0 · source: NVD
ES
Endpoint Security · Eset
through 6.10.910.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-37850
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-37850
Vendor Advisory
https://support.eset.com/en/ca8151
More from Cyber Security
9.8
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
7.8
CVE-2023-2847
During internal security analysis, a local privilege escalation vulnerability has been identified
7.8
CVE-2019-16519
ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks
7.5
CVE-2020-10193
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive
6.7
CVE-2019-19792
A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files