cyber.hendryadrian.com
Vulnerability & Exploit · securityweek.com

Nightmare Eclipse Releases HardBreacher Kaspersky Privilege-Escalation PoC

· Original article ↗

Summary

Nightmare Eclipse released HardBreacher, a proof-of-concept exploit for privilege escalation in Kaspersky Endpoint Security. The researcher described potential disruption if it succeeds; Kaspersky says the issue is fixed through an automatic or manual database update.

Key points

  • Nightmare Eclipse, also known as Chaotic Eclipse, released HardBreacher, a proof-of-concept targeting privilege escalation in Kaspersky Endpoint Security.
  • The researcher said the PoC was poorly assembled but could work.
  • The researcher claimed successful exploitation could disrupt the product and affect its file-access decisions.
  • Kaspersky told SecurityWeek that the underlying issue has been resolved.
  • Kaspersky said the fix is delivered automatically or can be applied by manually triggering a database update.

Article Details

Vulnerability Types
  • Privilege escalation
Exploitation Status
unknown
Exploit Availability
public_poc
Patch Status
available

MITRE ATT&CK

T1068 · Exploitation for Privilege EscalationHardBreacher is described as a proof-of-concept exploit for a privilege-escalation vulnerability in Kaspersky Endpoint Security.

People

Nightmare EclipseResearcher who released the HardBreacher proof-of-concept; the article says they are also known as Chaotic Eclipse.

Vendors

KasperskyThe researcher known as Nightmare Eclipse has dropped another zero-day — this time a privilege escalation exploit targeting a Kaspersky endpoint security product.

Products

Kaspersky Endpoint SecurityThe researcher known as Nightmare Eclipse has dropped another zero-day — this time a privilege escalation exploit targeting a Kaspersky endpoint security product.

Tools

HardBreacherThe exploit has been dubbed HardBreacher.LegacyHiveOther exploits made public recently by Nightmare Eclipse include ShieldBreak, which allows an attacker to spawn a shell with System privileges, and LegacyHive, which enables privilege escalation.ShieldBreakOther exploits made public recently by Nightmare Eclipse include ShieldBreak, which allows an attacker to spawn a shell with System privileges, and LegacyHive, which enables privilege escalation.

Related Articles