CVE-2020-26200
Medium
Description
A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.
SeverityMedium
CVSS6.8
Exploit probability—
ProductKaspersky Endpoint Security
PublishedFeb 26, 2021
First seenFeb 26, 2021
How to fix
Update
- kaspersky rescue_disk18.0.11.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky endpoint_security | 10, 11.0.0, 11.0.1, 11.1.0 | — |
| kaspersky rescue_disk | v < 18.0.11.3 | 18.0.11.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.