PT-2021-2524

تاريخ النشر

2021-03-31

·

تاريخ التحديث

2021-03-31

الوصف من

CVSS 2.0
4.4
متوسطة
المقاييسAV:L/AC:M/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus (affected versions not specified) Kaspersky Internet Security (affected versions not specified) Kaspersky Total Security (affected versions not specified) Kaspersky Small Office Security (affected versions not specified) Kaspersky Security Cloud (affected versions not specified)
Description The issue is related to the implementation of the UI process in Kaspersky's antivirus products, specifically concerning weaknesses in the authentication mechanism. Exploitation of this issue could allow an attacker to cause a denial of service.
Recommendations For Kaspersky Anti-Virus, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Internet Security, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Total Security, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Small Office Security, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Security Cloud, update to a version that addresses the authentication mechanism weaknesses. As a temporary workaround, consider restricting access to the authentication mechanism until a patch is available.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾