CVE-2025-8352: ESET PROTECT On-Prem 0 through 12.1.9.0 (with Web Console 12.1.252.0); status changes: 12.1.11.0 (using Web Console…

Affected technology

ESET PROTECT On-Prem · 0 through 12.1.9.0 (with Web Console 12.1.252.0); status changes: 12.1.11.0 (using Web Console 12.1.260.0 on Apache Tomcat 9.0.107) — unaffected, 0 through 12.0.13.0 (with Web Console 12.0.289.0); status changes: 12.0.15.0 (using Web Console 12.0.306.0 on Apache Tomcat 9.0.107) — unaffected, 0 through 11.1.16.0 (with Web Console 11.1.149.0); status changes: 11.1.18.0 (using Web Console 11.1.159.0 on Apache Tomcat 9.0.107) — unaffected
ESET spol. s.r.o

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and integrity impact as none; availability impact as low.