QID 376770

QID 376770: Kaspersky Security Centre and Web Console DLL Hijacking Vulnerability

Kaspersky Security Center is a single administration console for controlling all Kaspersky Lab security solutions and system administration tools that you use.

Due to unsafe DLL search path, the installer of Kaspersky Security Center and Web Console was susceptible to a DLL hijacking attack that allowed an attacker to elevate privileges in the system (CVE-2020-25045)

Affected Versions:
Kaspersky Security Center prior to 12
Kaspersky Security Center Web Console prior to 12 Patch A
QID Detection Logic(Authenticated):
This QID detects the vulnerable version of Kaspersky Security Center by checking the registry keys.

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 and prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.

  • CVSS V3 rated as High - 7.8 severity.
  • CVSS V2 rated as Medium - 4.4 severity.
    • Solution
    The vendor has released patches for these issues. Customers are advised to refer to Kaspersky Security Center
    Vendor References

    CVEs related to QID 376770

    CVE-2020-25045 |
    Software Advisories
    Advisory ID Software Component Link
    Kaspersky Security Center URL Logo support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
    By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].