Vulnerability · Published Jan 21, 2021 · Assigned by Kaspersky
CVE-2020-36199
Critical 9.8
In plain English
A critical-severity security flaw in Kaspersky TinyCheck. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)2.2%top 17.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Kaspersky TinyCheck | without commits 9fd360d and ea53de8 |