CVE-2021-37850 is a medium-severity vulnerability affecting ESET consumer and business products for macOS, including Cyber Security, Endpoint Antivirus, and Endpoint Security. A local attacker can exploit this flaw to stop the ESET daemon, effectively disabling the security product's protection until a system reboot. The CVSS score is 5.5, indicating a low attack complexity and requiring local user privileges, with the primary impact being a loss of integrity (disabling protection). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.10.700CPE matchmatch criteria | cpe:2.3:a:eset:cyber_security:*:*:*:*:-:macos:*:* | ||
<= 6.10.700CPE matchmatch criteria | cpe:2.3:a:eset:cyber_security:*:*:*:*:pro:macos:*:* | ||
<= 6.10.910.0CPE matchmatch criteria | cpe:2.3:a:eset:endpoint_antivirus:*:*:*:*:-:macos:*:* | ||
<= 6.10.910.0CPE matchmatch criteria | cpe:2.3:a:eset:endpoint_security:*:*:*:*:-:macos:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.