PT-2018-1485 · Microsoft · Windows 10 Servers+5

Ryan Hanson · Published 2018-08-14 · Updated 2019-10-03 · CVE-2018-0952

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Microsoft Visual Studio Windows 10 Servers

Description The issue is related to an Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector, which allows file creation in arbitrary locations. This is due to insufficient access restrictions. An attacker can exploit this vulnerability by creating a specially crafted application to create files in any location on the disk.

Recommendations For Windows Server 2016, update to a version that includes the fix for this issue. For Windows 10, update to a version that includes the fix for this issue. For Microsoft Visual Studio, update to a version that includes the fix for this issue. For Windows 10 Servers, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Diagnostics Hub Standard Collector until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2018-01036

CVE-2018-0952

Affected Products

Diagnostics Hub Standard Collector

Visual Studio

Windows

Windows 10

Windows 10 Servers

Windows Server 2016

References · 11

• 🔥 https://github.com/atredispartners/CVE-2018-0952-SystemCollector · Exploit
• 🔥 https://exploit-db.com/exploits/45244 · Exploit
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01036 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0952 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0952 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0952 · Security Note
• http://securitytracker.com/id/1041466 · Note
• https://support.microsoft.com/help/4343887 · Note
• http://securityfocus.com/bid/105048 · Note