PT-2021-2523

Published

2021-03-31

·

Updated

2021-03-31

Description by

CVSS 2.0
4.4
Medium
MetricsAV:L/AC:M/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus (affected versions not specified) Kaspersky Internet Security (affected versions not specified) Kaspersky Total Security (affected versions not specified) Kaspersky Small Office Security (affected versions not specified) Kaspersky Security Cloud (affected versions not specified)
Description The issue is related to weaknesses in the authentication mechanism of Kaspersky products. Exploitation of this issue may allow an attacker to cause a denial of service by running a malicious application.
Recommendations For Kaspersky Anti-Virus, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Internet Security, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Total Security, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Small Office Security, update to a version that addresses the authentication mechanism weaknesses. For Kaspersky Security Cloud, update to a version that addresses the authentication mechanism weaknesses. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾