PT-2023-6915 · Unknown · Pc Settings Tool
Haruki Yadani
·
Publicado
2023-02-10
·
Atualizado
2025-03-19
·
CVE-2023-25011
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PC settings tool versions 10.1.26.0 and earlier
PC settings tool versions 11.0.22.0 and earlier
Description
The issue is related to a lack of authentication for a critical function in the PC Settings Tool. This can be exploited to allow an attacker to elevate their privileges. Specifically, an attacker can write to the registry with administrator privileges using only standard user privileges.
Recommendations
For PC settings tool versions 10.1.26.0 and earlier, update to a version that includes a fix for this issue.
For PC settings tool versions 11.0.22.0 and earlier, update to a version that includes a fix for this issue.
As a temporary workaround, consider restricting access to the registry to minimize the risk of exploitation.
Correção
Missing Authentication
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Pc Settings Tool