CVE-2020-25045

Name of the Vulnerable Software and Affected Versions Kaspersky Security Center versions prior to 12 Patch A Kaspersky Security Center Web Console versions prior to 12 Patch A

Description The issue is related to errors in the mechanism for checking the path to dynamically loaded libraries (DLL), which can be exploited to elevate privileges in the system. This can allow an attacker to perform a DLL hijacking attack.

Recommendations For Kaspersky Security Center versions prior to 12 Patch A, update to version 12 Patch A or later to resolve the issue. For Kaspersky Security Center Web Console versions prior to 12 Patch A, update to version 12 Patch A or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable DLL loading mechanism to minimize the risk of exploitation.