PT-2017-04 · Kaspersky · Kaspersky Embedded Systems Security

Publicado

2017-01-27

·

Atualizado

2017-01-27

CVSS v2.0

6.2

Média

VetorAV:L/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Kaspersky Embedded Systems Security (affected versions not specified)
Description The issue is caused by incorrect operation of protection mechanisms under excessive service load. An attacker can exploit this to elevate their privileges and run an application not listed in the whitelist, causing excessive service load and exceeding the time allocated for checking the executable file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2017-02555

Produtos afetados

Kaspersky Embedded Systems Security