CVE-2025-4952

Denial-of-service vulnerability in ESET security products for Windows

CVSS 6.8 MEDIUMEPSS 0.1%CWE-732

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

31 out 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

ESET · ESET Endpoint Antivirus ESET · ESET Endpoint Security for Windows ESET · ESET File Security for Microsoft Azure ESET · ESET Internet Security ESET · ESET Mail Security for IBM Domino ESET · ESET Mail Security for Microsoft Exchange Server ESET · ESET NOD32 Antivirus ESET · ESET Safe Server ESET · ESET Security for Microsoft SharePoint Server ESET · ESET Security Ultimate ESET · ESET Server Security for Windows Server ESET · ESET Small Business Security ESET · ESET Smart Security Premium

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed