¡¾Îó²îͨ¸æ¡¿Kaspersky VPN Secure ConnectionÍâµØȨÏÞÌáÉýÎó²î£¨CVE-2022-27535£©
Ðû²¼Ê±¼ä 2022-08-050x00 Îó²î¸ÅÊö
CVE ID | CVE-2022-27535 | ·¢Ã÷ʱ¼ä | 2022-08-05 |
Àà ÐÍ | LPE | µÈ ¼¶ | ¸ßΣ |
Ô¶³ÌʹÓà | ·ñ | Ó°Ïì¹æÄ£ | |
¹¥»÷ÖØƯºó | µÍ | Óû§½»»¥ | ÎÞ |
PoC/EXP | ÔÚҰʹÓà |
0x01 Îó²îÏêÇé
Kaspersky VPN Secure Connection£¨¿¨°Í˹»ùVPN Çå¾²ÅþÁ¬£©Ö¼ÔÚΪԶ³ÌÊÂÇéÖ°Ô±ÌṩһÖÖÇå¾²µÄ·½·¨À´ÅþÁ¬µ½¹«Ë¾ÍøÂçºÍ×ÊÔ´¡£¡£¡£¡£
8ÔÂ4ÈÕ£¬£¬£¬Ñо¿Ö°Ô±Åû¶ÁËKaspersky VPN Secure Connection for Microsoft WindowsÖеÄÒ»¸öÍâµØȨÏÞÌáÉýÎó²î£¨CVE-2022-27535£©£¬£¬£¬¸ÃÎó²îµÄCVSSÆÀ·ÖΪ7.8¡£¡£¡£¡£
Kaspersky VPN Secure Connection 21.3.10.391 (h)±£´æÍâµØȨÏÞÌáÉýÎó²î£¬£¬£¬ÓÉÓÚÔÚÓ¦ÓóÌÐòµÄSupport Tools²¿·Ö£¬£¬£¬Í¨Ë×Óû§¿ÉÒÔʹÓÃDelete service data and reportsÀ´É¾³ýÌØȨÎļþ¼Ð£¬£¬£¬µ¼Ö¿ÉÒÔÀÄÓÃí§ÒâÎļþ¼Ðɾ³ýÀ´ÊµÏÖȨÏÞÌáÉýΪSYSTEM¡£¡£¡£¡£
Ó°Ïì¹æÄ£
Kaspersky VPN Secure Connection for Microsoft Windows 21.3.10.391 (h)
0x02 Çå¾²½¨Òé
ÏÖÔÚ´ËÎó²îÒѾÐÞ¸´£¬£¬£¬ÊÜÓ°ÏìÓû§¿ÉÉý¼¶µ½Kaspersky VPN Secure Connection for Microsoft Windows 21.7.7.393 »ò¸ü¸ß°æ±¾¡£¡£¡£¡£
ÏÂÔØÁ´½Ó£º
https://www.kaspersky.com/vpn-secure-connection
0x03 ²Î¿¼Á´½Ó
https://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/
https://www.darkreading.com/endpoint/high-severity-bug-kaspersky-vpn-client-pc-takeover
0x04 °æ±¾ÐÅÏ¢
°æ±¾ | ÈÕÆÚ | ÐÞ¸ÄÄÚÈÝ |
V1.0 | 2022-08-05 | Ê×´ÎÐû²¼ |
0x05 ¸½Â¼
c7c7ÓéÀÖƽ̨¼ò½é
c7c7ÓéÀÖƽ̨½¨ÉèÓÚ1996Ä꣬£¬£¬ÊÇÓÉÁôÃÀ²©Ê¿ÑÏÍû¼ÑŮʿ½¨ÉèµÄ¡¢ÓµÓÐÍêÈ«×ÔÖ÷֪ʶ²úȨµÄÐÅÏ¢Çå¾²¸ß¿Æ¼¼ÆóÒµ¡£¡£¡£¡£ÊǺ£ÄÚ×î¾ßʵÁ¦µÄÐÅÏ¢Çå¾²²úÆ·¡¢Ç徲ЧÀͽâ¾ö¼Æ»®µÄÁ캽ÆóÒµÖ®Ò»¡£¡£¡£¡£
¹«Ë¾×ܲ¿Î»ÓÚ±±¾©ÊÐÖйشåÈí¼þÔ°c7c7ÓéÀÖƽ̨´óÏ㬣¬£¬¹«Ë¾Ô±¹¤½ü4000ÈË£¬£¬£¬Ñз¢ÍŶÓ1200ÓàÈË, ÊÖÒÕЧÀÍÍŶÓ1300ÓàÈË¡£¡£¡£¡£ÔÚÌìϸ÷Ê¡¡¢ÊС¢×ÔÖÎÇøÉèÁ¢·ÖÖ§»ú¹¹ÁùÊ®¶à¸ö£¬£¬£¬ÓµÓÐÁýÕÖÌìϵÄÏúÊÛϵͳ¡¢ÇþµÀϵͳºÍÊÖÒÕÖ§³Öϵͳ¡£¡£¡£¡£¹«Ë¾ÓÚ2010Äê6ÔÂ23ÈÕÔÚÉîÛÚÖÐС°å¹ÒÅÆÉÏÊС£¡£¡£¡££¨¹ÉƱ´úÂ룺002439£©
¶àÄêÀ´£¬£¬£¬c7c7ÓéÀÖƽ̨ÖÂÁ¦ÓÚÌṩ¾ßÓйú¼Ê¾ºÕùÁ¦µÄ×ÔÖ÷Á¢ÒìµÄÇå¾²²úÆ·ºÍ×î¼Ñʵ¼ùЧÀÍ£¬£¬£¬×ÊÖú¿Í»§ÖÜÈ«ÌáÉýÆäIT»ù´¡ÉèÊ©µÄÇå¾²ÐÔºÍÉú²úЧÄÜ£¬£¬£¬Îª´òÔìºÍÌáÉý¹ú¼Ê»¯µÄÃñ×åÐÅÏ¢Çå¾²¹¤ÒµÁì¾üÆ·Åƶø²»Ð¸Æ𾢡£¡£¡£¡£
¹ØÓÚc7c7ÓéÀÖƽ̨
c7c7ÓéÀÖƽ̨Çå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄÖ÷ÒªÕë¶ÔÖ÷ÒªÇå¾²Îó²îµÄÔ¤¾¯¡¢¸ú×ٺͷÖÏíÈ«Çò×îеÄÍþвÇ鱨ºÍÇå¾²±¨¸æ¡£¡£¡£¡£
¹Ø×¢ÒÔϹ«Öںţ¬£¬£¬»ñÈ¡È«Çò×îÐÂÇå¾²×ÊѶ£º
¾©¹«Íø°²±¸11010802024551ºÅ