PT-2021-2662 · Kaspersky · Kaspersky Small Office Security+5
Published
2021-03-30
·
Updated
2021-03-30
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Kaspersky Anti-Virus (affected versions not specified)
Kaspersky Internet Security (affected versions not specified)
Kaspersky Total Security (affected versions not specified)
Kaspersky Security Cloud (affected versions not specified)
Kaspersky Small Office Security (affected versions not specified)
Kaspersky Endpoint Security для Windows (affected versions not specified)
Description:
The issue is related to errors in permission and privilege management in the Secure Payment component. Exploitation of this issue may allow an attacker to elevate their privileges in the system and execute arbitrary code.
Recommendations:
For Kaspersky Anti-Virus, update to a version that includes a fix for the permission management errors.
For Kaspersky Internet Security, update to a version that includes a fix for the permission management errors.
For Kaspersky Total Security, update to a version that includes a fix for the permission management errors.
For Kaspersky Security Cloud, update to a version that includes a fix for the permission management errors.
For Kaspersky Small Office Security, update to a version that includes a fix for the permission management errors.
For Kaspersky Endpoint Security для Windows, update to a version that includes a fix for the permission management errors.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kaspersky Anti-Virus
Kaspersky Endpoint Security Для Windows
Kaspersky Internet Security
Kaspersky Security Cloud
Kaspersky Small Office Security
Kaspersky Total Security