PT-2017-18494 · Microsoft · Device Guard+4

Publicado 2017-10-10 · Atualizado 2019-10-03 · CVE-2017-8715

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions 10 Gold, 1511, 1607, and 1703 Windows Server 2016

Description A security feature bypass issue exists in the way Microsoft Device Guard handles Windows PowerShell sessions. This allows attackers to bypass security features and potentially affect the system.

Recommendations For Microsoft Windows 10 versions 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, consider restricting access to Windows PowerShell sessions as a temporary mitigation measure until a fix is available. As a workaround, restrict the use of Windows PowerShell to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2017-8715

Produtos afetados

Device Guard

Windows 10

Windows

Windows Powershell

Windows Server 2016

Referências · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8715 · Nota de Segurança
• http://securityfocus.com/bid/101163 · Nota
• http://securitytracker.com/id/1039526 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-8715 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-8715 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8715 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8715 · Aviso do Fabricante