The vulnerability of the Dr.Web Enterprise Security Suite, a antivirus protection tool, allows a hacker to execute arbitrary code.

The vulnerability in the update mechanism of the Dr.Web Enterprise Security Suite lies in the lack of encryption for network traffic between the update server and the software being updated. The HTTP network connection is established without using TSL or SSH. This allows a malicious actor to carr...