PT-2021-5107 · Kaspersky · Kaspersky Total Security+3
Published
2021-11-22
·
Updated
2021-11-22
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Kaspersky VPN Secure Connection (affected versions not specified)
Kaspersky Internet Security (affected versions not specified)
Kaspersky Total Security (affected versions not specified)
Kaspersky Security Cloud (affected versions not specified)
Description
The issue is related to errors in the code of the installation file for Kaspersky antivirus protection tools. Exploitation of this issue may allow an attacker to delete any file during installation.
Recommendations
For Kaspersky VPN Secure Connection, update to a version that includes a fix for the code errors in the installation file.
For Kaspersky Internet Security, update to a version that includes a fix for the code errors in the installation file.
For Kaspersky Total Security, update to a version that includes a fix for the code errors in the installation file.
For Kaspersky Security Cloud, update to a version that includes a fix for the code errors in the installation file.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kaspersky Internet Security
Kaspersky Security Cloud
Kaspersky Total Security
Kaspersky Vpn Secure Connection