Kaspersky Updates
1746Warning Date
Severity Level
Warning Number
Target Sector
16 December, 2020
● High
2020-2215
All
Description:
Kaspersky has released a security updates to address several vulnerabilities in the following products:
- Kaspersky Anti-Ransomware Tool
- prior to version 5.0 patch E (issue 1)
- Kaspersky Password Manager
- prior to version 9.2 patch L (issue 3)
- Kaspersky Total Security
- prior to version 2021 (issue 4)
- prior to version 2021 MR2 (issue 5)
- Kaspersky Security Cloud
- prior to version 2021 (issue 4)
- prior to version 2021 MR2 (issue 5)
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Elevate privileges
- Create files in privileged file locations
- Delete sensitive files
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review Kaspersky security advisory and apply the necessary updates: