CVE-2017-12823
HIGHKaspersky Embedded Systems Security 1.2.0.300 - Local Privilege Escalation via Kernel Pool Memory Corruption
Title source: llmDescription
Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/102141
Issue Tracking, Vendor Advisory x_refsource_confirm
https://support.kaspersky.com/vulnerability.aspx?el=12430#091017
Scores
CVSS v3
7.8
EPSS
0.0031
EPSS Percentile
22.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (3)
kaspersky/embedded_systems_security
1.2.0.300
kaspersky/embedded_systems_security
2.0.0.385
Kaspersky Labs/Kaspersky Embedded Systems Security
1.2.0.300
Published
Dec 08, 2017
Tracked Since
Feb 18, 2026