6.8

CVE-2025-4952

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerESET
≫
Produkt ESET NOD32 Antivirus
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Internet Security
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Smart Security Premium
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Security Ultimate
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Small Business Security
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Safe Server
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Endpoint Antivirus
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Endpoint Security for Windows
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Server Security for Windows Server
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Mail Security for Microsoft Exchange Server
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Mail Security for IBM Domino
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET Security for Microsoft SharePoint Server
Default Statusunaffected
Version 1496
Status unaffected
HerstellerESET
≫
Produkt ESET File Security for Microsoft Azure
Default Statusunaffected
Version 1496
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.033
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@eset.com 6.8 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.