Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25045
Reference (s):
- https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
- URL: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720