Vulnerability · Published Feb 26, 2021 · Assigned by Kaspersky
CVE-2020-26200
Medium 6.8
In plain English
A medium-severity security flaw in Kaspersky Endpoint Security with the Full Disk Encryption component installed. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Official description
A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| N/A | Kaspersky Rescue Disk Version | All versions prior to 18.0.11.3 (patch C) |
| N/A | Kaspersky Endpoint Security with the Full Disk Encryption component installed | 10 SP2 MR210 SP2 MR311.0.011.0.111.1.0 |