CVE-2020-23967: High severity drweb web security space vulnerability
Published Mar 8, 2021
·Updated
Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate.
Affected Software
2 affected components
DrWeb Security Space=11.0
DrWeb Security Space=12.0
Event History
Mar 8, 2021
CVE Published
via MITRE·02:34 PM
Data Sourced
via MITRE·02:34 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-23967?
CVE-2020-23967 has a high severity rating due to its potential for privilege escalation to NT AUTHORITY\SYSTEM.
2
How do I fix CVE-2020-23967?
To mitigate CVE-2020-23967, users should update Dr.Web Security Space to the latest patched version.
3
Who is affected by CVE-2020-23967?
CVE-2020-23967 affects local users of Dr.Web Security Space versions 11 and 12 without administrative privileges.
4
What causes CVE-2020-23967?
CVE-2020-23967 is caused by insufficient control during the autoupdate process in Dr.Web Security Space.
5
Can CVE-2020-23967 be exploited remotely?
CVE-2020-23967 requires local access, meaning it cannot be exploited remotely without physical access to the affected system.