Lucene search

K
kasperskyKaspersky LabKLA10277
HistoryFeb 26, 2014 - 12:00 a.m.

KLA10277 LPE vulnerability in Norman Security Suite

2014-02-2600:00:00
Kaspersky Lab
threats.kaspersky.com
73

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%

An unspecified vulnerability was found in the Norman Security Suite. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via unknown vectors.

Original advisories

Related products

Norman-Security-Suite

CVE list

CVE-2014-0816 high

Solution

Update to latest version

Impacts

  • PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

  • Norman Security Suite versions 10.1 and earlier

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%

Related for KLA10277