PT-2021-1569 · Microsoft · Windows Multipoint Management+1

Afang5472 + 3 · Published 2021-01-12 · Updated 2024-10-08 · CVE-2021-1689

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows Multipoint Management (affected versions not specified)

Description: The issue is related to insufficient access restrictions in the Windows Multipoint Management service, which can be exploited to elevate privileges. This could allow an attacker to affect the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

BDU:2021-00168

CVE-2021-1689

Affected Products

Windows

Windows Multipoint Management

References · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-1689 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1689 · Security Note
• https://bdu.fstec.ru/vul/2021-00168 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1689 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1689 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1689 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2021011233 · Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1689 · Note