2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"ESET NOD32 Antivirus","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"18.1.13.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ESET Internet Security","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"18.1.13.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ESET Smart Security Premium","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"18.1.13.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ESET Security Ultimate","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"18.1.13.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ESET Endpoint Antivirus for Windows","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"12.0.2049.0","status":"affected","version":"0","versionType":"custom"},{"lessThanOrEqual":"11.1.2059.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ESET Endpoint Security for Windows","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"12.0.2049.0","status":"affected","version":"0","versionType":"custom"},{"lessThanOrEqual":"11.1.2059.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ESET Small Business Security","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"18.1.13.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ESET Safe Server","vendor":"ESET, spol. s.r.o","versions":[{"lessThanOrEqual":"18.1.13.0","status":"affected","version":"0","versionType":"custom"}]}],"source":"security@eset.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Installation file of ESET security products on Windows \n\nallow an attacker to misuse to delete an arbitrary file without having the permissions to do so."},{"lang":"es","value":"Los archivos de instalación de los productos de seguridad de ESET en Windows permiten que un atacante haga un mal uso de ellos para eliminar un archivo arbitrario sin tener los permisos para hacerlo."}],"id":"CVE-2025-5028","lastModified":"2026-06-17T09:47:03.297","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@eset.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-5028","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-07-11T16:11:20.838647Z","version":"2.0.3"}}]},"published":"2025-07-11T07:15:23.940","references":[{"source":"security@eset.com","url":"https://support.eset.com/en/ca8838-arbitrary-file-deletion-vulnerability-in-eset-product-installers-on-windows-fixed"}],"sourceIdentifier":"security@eset.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"security@eset.com","type":"Secondary"}]}
|