PT-2020-3041 · Dr.Web · Dr.Web Enterprise Security Suite
Published
2020-05-05
·
Updated
2020-05-05
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:P |
Name of the Vulnerable Software and Affected Versions
Dr.Web Enterprise Security Suite (affected versions not specified)
Description
The issue is related to insufficient access control in the Update and ES Service modules of the Dr.Web Enterprise Security Suite antivirus software. Exploitation of this issue may allow an attacker to execute arbitrary code in the context of the antivirus process with system privileges.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Insufficient Verification of Data Authenticity
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Dr.Web Enterprise Security Suite