CVE-2025-8352: CWE-770 Allocation of resources without limits or throttling in ESET spol. s.r.o ESET PROTECT On-Prem

This vulnerability involves the allocation of resources in ESET PROTECT On-Prem without any limits or throttling mechanisms, resulting in excessive consumption of CPU and RAM. Such unbounded resource consumption can create conditions conducive to Denial-of-Service attacks by overwhelming the system's capacity to operate normally. There is no information on affected versions or available patches. The CVSS vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and a medium severity level.

The vulnerability can cause increased CPU and RAM consumption on affected systems, potentially leading to Denial-of-Service conditions where legitimate users may be unable to access or use the service effectively. No evidence of active exploitation or known exploits in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor official ESET advisories for updates and apply any fixes once available.