CVE-2020-28950

The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
KasperskyCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
kasperskyanti-ransomware_tool
𝑥
< 4.0
kasperskyanti-ransomware_tool
4.0:patch_c
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
https://exchange.xforce.ibmcloud.com/vulnerabilities/192653
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720