PT-2017-12261 · Microsoft · Windows 10+1

Published 2017-10-10 · Updated 2019-10-03 · CVE-2017-11829

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 (affected versions not specified)

Description The issue is related to an elevation of privilege when the Windows Update Delivery Optimization does not properly enforce file share permissions, allowing attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2017-11829

Affected Products

Windows

Windows 10

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11829 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11829 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11829 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11829 · Vendor Advisory
• http://securityfocus.com/bid/101213 · Note
• http://securitytracker.com/id/1039526 · Note