Kaspersky Embedded Systems Security 1.1: Critical Fix KB13520

 

 

Kaspersky Embedded Systems Security 1.1

 
 
 

Kaspersky Embedded Systems Security 1.1: Critical Fix KB13520

Back to "General Info"
2017 Jul 25 ID: 13520
 
 
 
 

Description

Kaspersky Lab has fixed the vulnerabilities in Kaspersky Embedded Systems Security versions 1.1.0.104 and 1.2.0.300 that were found by the company Positive Technologies:

  1. The Applications Launch Control component was unable to manage properly a large number of applications launching simultaneously. As a result, some applications were allowed to launch, even if these applications were to be strictly denied by the rules. 
  2. The versions fixed provide an improved algorithm for the processing of a big quantity of application launches, and guarantee strict denial for PowerShell script execution by placing the script body into the command line.
  3. No access restrictions on connection to the Kaspersky Embedded Systems Security filter driver were applied for other applications.

Affected versions

  • Kaspersky Embedded Systems Security 1.1 (1.1.0.104).
  • Kaspersky Embedded Systems Security 1.1 MR1 (1.2.0.300).

Versions fixed

The vulnerability was fixed in Kaspersky Embedded Systems Security 2.0 (2.0.0.385) and Critical Fix KB13520.

To eliminate the vulnerability from Kaspersky Embedded Systems Security 1.1 (1.1.0.104), use one of the options given below:

  • Upgrade the Kaspersky Embedded Systems Security to version 1.1 MR1 (1.2.0.300) and apply Critical Fix KB13520: for x86, x64.
  • Upgrade Kaspersky Embedded Systems Security to version 2.0 (2.0.0.385).

To eliminate the vulnerability from Kaspersky Embedded Systems Security 1.1 MR1 (1.2.0.300), use one of the options given below:

  • Apply Critical Fix KB13520: for x86, x64.
  • Upgrade Kaspersky Embedded Systems Security to version 2.0 (2.0.0.385).

Acknowledgments

We would like to extend our thanks to the Positive Technology for reporting these bugs to Kaspersky Lab.

 
 
 
 
Was this information helpful?
Yes No
 

 
 

Have you found what you were looking for?

Please let us know how we can make this website more comfortable for you

Send feedback Send feedback

Thank you!

Thank you for submitting your feedback.
We will review your feedback shortly.