CVE-2020-23967

EUVD-2020-16703
Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
drwebsecurity_space
11.0
drwebsecurity_space
12.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://amonitoring.ru/article/drweb/
https://habr.com/ru/company/pm/blog/509592/
https://www.youtube.com/watch?v=q7Kqi7kE59U
https://amonitoring.ru/article/drweb/
https://habr.com/ru/company/pm/blog/509592/
https://www.youtube.com/watch?v=q7Kqi7kE59U