CVE-2019-16896

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an…

published December 27, 2019

CVSS
—
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00402 · 33.3th percentile
Published
2019-12-27T15:27Z
EPSS history
Timeline
  • 27 DEC 15:27Z
    In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an…
    cvelistv5