The vulnerability is an allocation of resources without limits or throttling in ESET PROTECT On‑Prem, resulting in excessive CPU and RAM consumption. This can bring the service to a non‑responsive state, effectively denying legitimate users access. The weakness aligns with the Resource Exhaustion category (CWE‑770).

ESET spol. s.r.o ESET PROTECT On‑Prem is affected. No specific version details were provided, so the vulnerability is presumed to exist across all current releases until a patch is applied.

The CVSS score of 6.9 indicates moderate severity, and the EPSS score is not available, making the actual exploitation likelihood unclear. The vulnerability is not currently listed in the CISA KEV catalog. Based on the description, the likely attack vector involves an attacker sending large or malformed requests to the protected service, provoking resource exhaustion. With no exploitation prerequisites disclosed, the risk remains moderate but could lead to significant operational disruption if not mitigated.