CVE-2022-27535
High
Published: 05 August 2022
Published
05 August 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0020
41.5th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-27535 is a high-severity an unspecified weakness vulnerability in Kaspersky Vpn Secure Connection. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 41.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-32036
Vulnerability details
Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
kaspersky
vpn secure connection
≤ 21.6
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.