CVE-2020-25045

Summary

CVE	CVE-2020-25045
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-09-02 20:15:00 UTC
Updated	2020-09-11 15:43:00 UTC
Description	Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.

Risk And Classification

Problem Types: CWE-427

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Kaspersky	Security Center	All	All	All	All
Application	Kaspersky	Security Center	All	All	All	All
Application	Kaspersky	Security Center Web Console	All	All	All	All
Application	Kaspersky	Security Center Web Console	All	All	All	All

References

Reference	Source	Link	Tags
List of Advisories	MISC	support.kaspersky.com	Broken Link
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

376770 Kaspersky Security Centre and Web Console DLL Hijacking Vulnerability