« Volver al listado

CVE-2017-12823

Estado: ModificadaAlta (7.8)—

Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Kaspersky — Embedded Systems Security

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-12823",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "vulnerability@kaspersky.com",
      "affectedData": [
        {
          "vendor": "Kaspersky Labs",
          "product": "Kaspersky Embedded Systems Security",
          "versions": [
            {
              "status": "affected",
              "version": "1.2.0.300"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-12-08T16:29:00.200",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/102141",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "vulnerability@kaspersky.com"
    },
    {
      "url": "https://support.kaspersky.com/vulnerability.aspx?el=12430#091017",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "source": "vulnerability@kaspersky.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/102141",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.kaspersky.com/vulnerability.aspx?el=12430#091017",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation."
    },
    {
      "lang": "es",
      "value": "La corrupción del grupo de memoria del kernel en uno de los controladores en Kaspersky Embedded Systems Security 1.2.0.300 conduce a una escalada de privilegios."
    }
  ],
  "lastModified": "2026-06-17T01:03:59.907",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kaspersky:embedded_systems_security:1.2.0.300:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A081C0F-617F-40EE-97D1-9CE93534BD81"
            },
            {
              "criteria": "cpe:2.3:a:kaspersky:embedded_systems_security:2.0.0.385:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AC319BC-2093-46A9-A657-367A62C4C8AA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vulnerability@kaspersky.com"
}