CVE Vulnerability

CVE-2020-26200

A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.

4.6 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

6.8 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#170221 Broken Link
https://github.com/CVEProject/cvelist/blob/master/2020/26xxx/CVE-2020-26200.json Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:kaspersky:endpoint_security:11.0.0:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky:endpoint_security:11.0.1:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky:endpoint_security:11.1.0:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky:endpoint_security:10:sp2_mr3:*:*:*:*:*:*
cpe:2.3:a:kaspersky:endpoint_security:10:sp2_mr2:*:*:*:*:*:*
cpe:2.3:a:kaspersky:rescue_disk:*:*:*:*:*:*:*:*
Information

Published : 2021-02-26 02:15

Updated : 2021-07-21 11:39

NVD link : CVE-2020-26200

Mitre link : CVE-2020-26200

Products Affected
No products.
CWE
CWE-287