Lucene search

[email protected]CVE-2020-26200

HistoryFeb 26, 2021 - 2:15 p.m.

CVE-2020-26200

2021-02-2614:15:12

CWE-287

[email protected]

web.nvd.nist.gov

1014

kaspersky

bootloader

vulnerability

uefi

secure boot

bypass

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.

Affected configurations

NVD

Node

kasperskyendpoint_securityMatch10sp2_mr2

kasperskyendpoint_securityMatch10sp2_mr3

kasperskyendpoint_securityMatch11.0.0

kasperskyendpoint_securityMatch11.0.1

kasperskyendpoint_securityMatch11.1.0

kasperskyrescue_diskRange<18.0.11.3

CPENameOperatorVersion
kaspersky:endpoint_securitykaspersky endpoint securityeq10
kaspersky:endpoint_securitykaspersky endpoint securityeq11.0.0
kaspersky:endpoint_securitykaspersky endpoint securityeq11.0.1
kaspersky:endpoint_securitykaspersky endpoint securityeq11.1.0
kaspersky:rescue_diskkaspersky rescue disklt18.0.11.3

CPE	Name	Operator	Version
kaspersky:endpoint_security	kaspersky endpoint security	eq	10
kaspersky:endpoint_security	kaspersky endpoint security	eq	11.0.0
kaspersky:endpoint_security	kaspersky endpoint security	eq	11.0.1
kaspersky:endpoint_security	kaspersky endpoint security	eq	11.1.0
kaspersky:rescue_disk	kaspersky rescue disk	lt	18.0.11.3

CNA Affected

[
  {
    "product": "Kaspersky Rescue Disk Version",
    "vendor": "N/A",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 18.0.11.3 (patch C)"
      }
    ]
  },
  {
    "product": "Kaspersky Endpoint Security with the Full Disk Encryption component installed",
    "vendor": "N/A",
    "versions": [
      {
        "status": "affected",
        "version": "10 SP2 MR2"
      },
      {
        "status": "affected",
        "version": "10 SP2 MR3"
      },
      {
        "status": "affected",
        "version": "11.0.0"
      },
      {
        "status": "affected",
        "version": "11.0.1"
      },
      {
        "status": "affected",
        "version": "11.1.0"
      }
    ]
  }
]

References

github.com/CVEProject/cvelist/blob/master/2020/26xxx/CVE-2020-26200.json

support.kaspersky.com/general/vulnerability.aspx?el=12430#170221

Social References

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

Related for CVE-2020-26200

cvelist1 nvd1 prion1