CVE-2025-4952

MEDIUM CVSS 4.0: 6.8 EPSS 0.14%
Updated Oct 31, 2025
Eset
Parameter Value
CVSS 6.8 (MEDIUM)
Type CWE-732 (Incorrect Permission Assignment)
Vendor Eset
Public PoC No

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
High
Admin privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v4.0

Vulnerable Products 13

Configuration From (including) Up to (excluding)
Eset Eset_Nod32_Antivirus
cpe:2.3:a:eset:eset_nod32_antivirus:1496:*:windows:*:*:*:*:*
— —
Eset Eset_Internet_Security
cpe:2.3:a:eset:eset_internet_security:1496:*:*:*:*:*:*:*
— —
Eset Eset_Smart_Security_Premium
cpe:2.3:a:eset:eset_smart_security_premium:1496:*:*:*:*:*:*:*
— —
Eset Eset_Security_Ultimate
cpe:2.3:a:eset:eset_security_ultimate:1496:*:*:*:*:*:*:*
— —
Eset Eset_Small_Business_Security
cpe:2.3:a:eset:eset_small_business_security:1496:*:*:*:*:*:*:*
— —
Eset Eset_Safe_Server
cpe:2.3:a:eset:eset_safe_server:1496:*:*:*:*:*:*:*
— —
Eset Eset_Endpoint_Antivirus
cpe:2.3:a:eset:eset_endpoint_antivirus:1496:*:*:*:*:*:*:*
— —
Eset Eset_Endpoint_Security_For_Windows
cpe:2.3:a:eset:eset_endpoint_security_for_windows:1496:*:*:*:*:*:*:*
— —
Eset Eset_Server_Security_For_Windows_Server
cpe:2.3:a:eset:eset_server_security_for_windows_server:1496:*:*:*:*:*:*:*
— —
Eset Eset_Mail_Security_For_Microsoft_Exchange_Server
cpe:2.3:a:eset:eset_mail_security_for_microsoft_exchange_server:1496:*:*:*:*:*:*:*
— —
Eset Eset_Mail_Security_For_Ibm_Domino
cpe:2.3:a:eset:eset_mail_security_for_ibm_domino:1496:*:*:*:*:*:*:*
— —
Eset Eset_Security_For_Microsoft_Sharepoint_Server
cpe:2.3:a:eset:eset_security_for_microsoft_sharepoint_server:1496:*:*:*:*:*:*:*
— —
Eset Eset_File_Security_For_Microsoft_Azure
cpe:2.3:a:eset:eset_file_security_for_microsoft_azure:1496:*:*:*:*:*:*:*
— —

Related Vulnerabilities