QID 376770

Kaspersky Security Center is a single administration console for controlling all Kaspersky Lab security solutions and system administration tools that you use.

Due to unsafe DLL search path, the installer of Kaspersky Security Center and Web Console was susceptible to a DLL hijacking attack that allowed an attacker to elevate privileges in the system (CVE-2020-25045)

Affected Versions:
Kaspersky Security Center prior to 12
Kaspersky Security Center Web Console prior to 12 Patch A
QID Detection Logic(Authenticated):
This QID detects the vulnerable version of Kaspersky Security Center by checking the registry keys.

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 and prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.