« Volver al listado

CVE-2025-4952

Estado: AplazadaMedia (6.8)—

Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Eset — Security ProductsAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-4952",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-4952",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-10-31T14:18:06.194469Z"
        }
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "security@eset.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 6.8,
          "Automatable": "NOT_DEFINED",
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "HIGH",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "security@eset.com",
      "affectedData": [
        {
          "vendor": "ESET",
          "modules": [
            "hips"
          ],
          "product": "ESET NOD32 Antivirus",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Internet Security",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Smart Security Premium",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Security Ultimate",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Small Business Security",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Safe Server",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Endpoint Antivirus",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Endpoint Security for Windows",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Server Security for Windows Server",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Mail Security for Microsoft Exchange Server",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Mail Security for IBM Domino",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET Security for Microsoft SharePoint Server",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "ESET",
          "modules": [
            "HIPS support module"
          ],
          "product": "ESET File Security for Microsoft Azure",
          "versions": [
            {
              "status": "unaffected",
              "version": "1496",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-10-31T13:15:34.173",
  "references": [
    {
      "url": "https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed",
      "source": "security@eset.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@eset.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration."
    }
  ],
  "lastModified": "2026-06-17T09:34:22.913",
  "sourceIdentifier": "security@eset.com"
}