PT-2017-2554 · Microsoft · Windows Powershell+1

Published 2017-07-11 · Updated 2019-10-03 · CVE-2017-8565

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 versions 1511 through 1703, and Windows Server 2016

Description The issue is related to inadequate access control when a CIM Instance is wrapped by a PSObject, allowing a remote code execution. This can enable a remote attacker to execute arbitrary code.

Recommendations For Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 versions 1511 through 1703, and Windows Server 2016, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2017-01765

CVE-2017-8565

Affected Products

Windows

Windows Powershell

References · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8565 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-8565 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-8565 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8565 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01765 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8565 · Vendor Advisory
• http://securityfocus.com/bid/99394 · Note
• http://securitytracker.com/id/1038854 · Note