Update module and the Code Execution

The vulnerability of the Update module and the ES Service of the Dr.Web Enterprise Security Suite antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows a hacker to execute arbitrary code within the context of the antivirus process, with system...

PT-2020-3041

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to insufficient access control in the Update and ES Service modules of the Dr.Web Enterprise Security Suite antivirus software. Exploitation of...

Dr.Web Enterprise Security Suite Protocol Error File Replacement

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in errors in the proprietary protocol used to connect the antivirus components to the server. Exploiting this vulnerability allows a malicious actor to create a fake “Dr.Web Enterprise Security Suite” server withi...

Dr.Web Enterprise Security Suite SQL Injection Privilege Escalation

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in the absence of SQL query filtering. Exploiting this vulnerability allows a malicious actor, who operates remotely and has no access to the application’s administrative operations via the web interface, to...

Dr.Web Enterprise Security Suite Code Execution

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in errors in processing the relative path to the catalog during the export of repository content into an archive. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the server by...

Security Management Center XSS

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...

Dr.Web Enterprise Security Suite Access Disclosure

The vulnerability of the Agent component in the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, is related to deficiencies in access control to named communication channels. Exploiting this vulnerability can allow attackers to gain access to information about user...

Agent Component Dr.Web RCE

The vulnerability of the Agent Dr.Web component in the Dr.Web Enterprise Security Suite antivirus protection tool is related to deficiencies in the mechanism for checking the digital signatures of executable files during the creation of communication channels with drivers. Exploiting this...

Security Management Center Info Disclosure

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the installed...

PT-2018-2742

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to a lack of protection for the web page structure in the "Security Center" component. This could allow a remote attacker to execute arbitrary HT...

PT-2018-2750

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to errors in processing relative directory paths when exporting repository content to an archive. Exploitation of this issue may allow a remote...

PT-2018-2746

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to the "Security Control Center" component of Dr.Web Enterprise Security Suite, specifically with the error reporting mechanism. An attacker can...

PT-2018-2751

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to errors in processing relative directory paths when exporting repository content to an archive. Exploitation of this issue may allow a remote...

PT-2018-2748

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to a lack of restrictions on writing, reading, and creating files within the server folder. This could allow a remote attacker to execute arbitra...

PT-2018-2743

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the "Security Control Center" component. This allows a remote attacker to execute arbitrary...

PT-2018-2745

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the "Центр управления безопасностью" component. This could allow a remote attacker to execu...

PT-2018-2740

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to a buffer overflow in the dwprot.sys driver of Dr.Web Enterprise Security Suite. Exploitation of this issue could allow an attacker to cause a...

PT-2018-2747

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to the "Security Control Center" component of Dr.Web Enterprise Security Suite, specifically with the document export mechanism. This could allow...

PT-2018-2754

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to insufficient access control in the named pipes communication component of the Dr.Web agent in Dr.Web Enterprise Security Suite. Exploitation o...

PT-2018-2753

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to insufficient input validation in a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web agent. Exploitation of this issue ma...