PT-2011-3266 · Microsoft · Windows 7

Published 2011-04-06 · Updated 2024-08-06 · CVE-2011-1652

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 (affected versions not specified)

Description The default configuration of Microsoft Windows 7 prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 service upon receipt of an IPv6 Router Advertisement (RA). This behavior does not provide an option to ignore an unexpected RA, allowing remote attackers to conduct man-in-the-middle attacks on communication with external IPv4 servers via vectors involving RAs, a DHCPv6 server, and NAT-PT on the local network. This issue is also known as a "SLAAC Attack". It is worth noting that the preference for IPv6 complies with RFC 3484, and determining the legitimacy of an RA is currently outside the scope of recommended behavior of host operating systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2011-1652

Affected Products

Windows 7

References · 4

• 🔥 https://lists.immunityinc.com/pipermail/dailydave/20110404/000122.html · Exploit
• 🔥 http://resources.infosecinstitute.com/slaac-attack · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-1652 · Security Note
• https://t.me/cvenotify/89532 · Telegram Post