¡¾Â©¶´Í¨¸æ¡¿Kaspersky VPN Secure Connectionµ±µØÈ¨ÏÞÌáÉý©¶´£¨CVE-2022-27535£©
Ðû²¼Ê±¼ä 2022-08-050x00 ©¶´¸ÅÊö
CVE ID | CVE-2022-27535 | ·¢ÏÖʱ¼ä | 2022-08-05 |
Àà ÐÍ | LPE | µÈ ¼¶ | ¸ßΣ |
Ô¶³ÌÀûÓà | ·ñ | Ó°Ï췶Χ | |
¹¥»÷ÅÓ´ó¶È | µÍ | Óû§½»»¥ | ÎÞ |
PoC/EXP | ÔÚÒ°ÀûÓÃ |
0x01 ©¶´ÏêÇé
Kaspersky VPN Secure Connection£¨¿¨°Í˹»ùVPN Äþ¾²Á¬½Ó£©Ö¼ÔÚΪԶ³ÌÊÂÇéÈËÔ±ÌṩһÖÖÄþ¾²µÄ·½Ê½À´Á¬½Óµ½¹«Ë¾ÍøÂçºÍ×ÊÔ´¡£
8ÔÂ4ÈÕ£¬Ñо¿ÈËÔ±Åû¶ÁËKaspersky VPN Secure Connection for Microsoft WindowsÖеÄÒ»¸öµ±µØÈ¨ÏÞÌáÉý©¶´£¨CVE-2022-27535£©£¬¸Ã©¶´µÄCVSSÆÀ·ÖΪ7.8¡£
Kaspersky VPN Secure Connection 21.3.10.391 (h)´æÔÚµ±µØÈ¨ÏÞÌáÉý©¶´£¬ÓÉÓÚÔÚÓ¦Ó÷¨Ê½µÄSupport Tools²¿ÃÅ£¬ÆÕͨÓû§¿ÉÒÔʹÓÃDelete service data and reportsÀ´É¾³ýÌØÈ¨Îļþ¼Ð£¬µ¼Ö¿ÉÒÔÀÄÓÃÈÎÒâÎļþ¼Ðɾ³ýÀ´ÊµÏÖȨÏÞÌáÉýΪSYSTEM¡£
Ó°Ï췶Χ
Kaspersky VPN Secure Connection for Microsoft Windows 21.3.10.391 (h)
0x02 Äþ¾²½¨Òé
Ŀǰ´Ë©¶´ÒѾÐÞ¸´£¬ÊÜÓ°ÏìÓû§¿ÉÉý¼¶µ½Kaspersky VPN Secure Connection for Microsoft Windows 21.7.7.393 »ò¸ü¸ß°æ±¾¡£
ÏÂÔØÁ´½Ó£º
https://www.kaspersky.com/vpn-secure-connection
0x03 ²Î¿¼Á´½Ó
https://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/
https://www.darkreading.com/endpoint/high-severity-bug-kaspersky-vpn-client-pc-takeover
0x04 °æ±¾ÐÅÏ¢
°æ±¾ | ÈÕÆÚ | ÐÞ¸ÄÄÚÈÝ |
V1.0 | 2022-08-05 | Ê×´ÎÐû²¼ |
0x05 ¸½Â¼
¶¶È¦Îª¶Ä¶øÉú¼ò½é
¶¶È¦Îª¶Ä¶øÉú½¨Á¢ÓÚ1996Ä꣬ÊÇÓÉÁôÃÀ²©Ê¿ÑÏÍû¼ÑŮʿ´´½¨µÄ¡¢ÓµÓÐÍêÈ«×ÔÖ÷֪ʶ²úȨµÄÐÅÏ¢Äþ¾²¸ß¿Æ¼¼ÆóÒµ¡£ÊǹúÄÚ×î¾ßʵÁ¦µÄÐÅÏ¢Äþ¾²²úÎï¡¢Äþ¾²·þÎñ½â¾ö·½°¸µÄÁ캽ÆóÒµÖ®Ò»¡£
¹«Ë¾×ܲ¿Î»ÓÚ±±¾©ÊÐÖйشåÈí¼þÔ°¶¶È¦Îª¶Ä¶øÉú´óÏ㬹«Ë¾Ô±¹¤½ü4000ÈË£¬Ñз¢ÍŶÓ1200ÓàÈË, ¼¼Êõ·þÎñÍŶÓ1300ÓàÈË¡£ÔÚÈ«¹ú¸÷Ê¡¡¢ÊС¢×ÔÖÎÇøÉèÁ¢·ÖÖ§»ú¹¹ÁùÊ®¶à¸ö£¬ÓµÓÐÁýÕÖÈ«¹úµÄÏúÊÛÌåϵ¡¢ÇþµÀÌåϵºÍ¼¼ÊõÖ§³ÖÌåϵ¡£¹«Ë¾ÓÚ2010Äê6ÔÂ23ÈÕÔÚÉîÛÚÖÐС°å¹ÒÅÆÉÏÊС££¨¹ÉƱ´úÂ룺002439£©
¶àÄêÀ´£¬¶¶È¦Îª¶Ä¶øÉúÖÂÁ¦ÓÚÌṩ¾ßÓйú¼Ê¾ºÕùÁ¦µÄ×ÔÖ÷´´ÐµÄÄþ¾²²úÎïºÍ×î¼Ñʵ¼ù·þÎñ£¬×ÊÖú¿Í»§È«ÃæÌáÉýÆäIT»ù´¡ÉèÊ©µÄÄþ¾²ÐÔºÍÉú²úЧÄÜ£¬Îª´òÔìºÍÌáÉý¹ú¼Ê»¯µÄÃñ×åÐÅÏ¢Äþ¾²¹¤ÒµÁì¾üÆ·ÅÆ¶ø²»Ð¸Å¬Á¦¡£
¹ØÓÚ¶¶È¦Îª¶Ä¶øÉú
¶¶È¦Îª¶Ä¶øÉúÄþ¾²Ó¦¼±ÏìÓ¦ÖÐÐÄÖ÷ÒªÕë¶ÔÖØÒªÄþ¾²Â©¶´µÄÔ¤¾¯¡¢¸ú×ٺͷÖÏíÈ«Çò×îеÄÍþвÇ鱨ºÍÄþ¾²³ÂËß¡£
¹Ø×¢ÒÔϹ«Öںţ¬»ñȡȫÇò×îÐÂÄþ¾²×ÊѶ£º