ESET Management Agent Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in ESET Management Agent for Windows, specifically in versions through 12.5.2104.0. This vulnerability arises from insecure temporary batch file execution, which allows an attacker with local Administrator rights to manipulate file operations during command execution. By altering these temporary files, the attacker can escalate privileges and execute code under the SYSTEM account.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling an attacker to execute code with SYSTEM privileges.

Remediation

ESET has released a patched version of the ESET Management Agent. Users are advised to upgrade to version 13.0.1400.0 or newer. For new installations, the latest installers should be downloaded from the ESET website or the ESET repository.