CVE-2020-25045

2020-09-0219:25:10

Kaspersky

www.cve.org

kaspersky security center

dll hijacking

vulnerability

privilege escalation

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

27.2%

JSON

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.

CNA Affected

[
  {
    "product": "Kaspersky Security Center & Kaspersky Security Center Web Console",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 12 & prior to 12 Patch A"
      }
    ]
  }
]

References

support.kaspersky.com/general/vulnerability.aspx?el=12430#290720