PT-2018-1879 · Microsoft · Windows 10+10
Dissectmalware
·
Published
2018-11-13
·
Updated
2018-12-13
·
CVE-2018-8415
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PowerShell Core versions 6.0 through 6.1
Windows 7
Windows 8.1
Windows 10
Windows RT 8.1
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Description
A tampering issue exists that could allow an attacker to execute unlogged code. This is related to errors in processing objects in memory, which may enable a remote attacker to elevate privileges and execute arbitrary code using a specially crafted application.
Recommendations
For PowerShell Core versions 6.0 through 6.1, update to a version that includes the fix for this issue.
For Windows 7, Windows 8.1, Windows 10, Windows RT 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019, apply the necessary patches or updates to resolve the issue.
As a temporary workaround, consider restricting the use of PowerShell until a patch is available.
Fix
Improper Privilege Management
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Powershell Core
Windows
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019