PT-2023-6062 · Microsoft · Windows Container Manager+1

Filip Dragović · Publicado 2023-10-10 · Atualizado 2024-05-29 · CVE-2023-36723

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Container Manager (affected versions not specified)

Description The issue concerns an elevation-of-privilege vulnerability in the Windows Container Manager service, which can be exploited by an attacker to elevate their privileges. This vulnerability allows attackers to affect the system and potentially execute code in a process running with SYSTEM privileges by abusing SxS assembly loading.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Link Following

Enumeração de Fraquezas

CWE-59

CWE-264

Identificadores relacionados

BDU:2023-06765

CVE-2023-36723

Produtos afetados

Windows

Windows Container Manager

Referências · 12

• 🔥 https://github.com/Wh04m1001/CVE-2023-36723 · Exploit
• https://cybersecurity-help.cz/vdb/SB2023101098 · Nota
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36723 · Aviso do Fabricante
• https://t.me/pentestingnews/40260 · Publicação no Telegram
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36723 · Nota de Segurança
• https://t.me/p0x3k/1589 · Publicação no Telegram
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36723 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/9190 · Publicação no Telegram
• https://t.me/pentestingnews/40084 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-36723 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-06765 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-36723 · Aviso do Fabricante