PT-2021-2637 · Microsoft · Windows Wlan Autoconfig Service+1

Matthew Johnson · Published 2021-04-13 · Updated 2023-12-29 · CVE-2021-28316

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows WLAN AutoConfig Service versions prior to the fixed version

Description: The issue is related to errors in security settings of the Windows WLAN service, allowing an attacker to gain unauthorized access to protected information. This security-feature bypass vulnerability affects the system. The Airstrike Attack allows for FDE bypass and EoP on domain-joined Windows workstations.

Recommendations: For Windows WLAN AutoConfig Service versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the WLAN AutoConfig Service to minimize the risk of exploitation. Avoid using vulnerable configurations in the WLAN service until the issue is resolved.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2021-02155

CVE-2021-28316

Affected Products

Windows

Windows Wlan Autoconfig Service

References · 21

• https://osv.dev/vulnerability/CVE-2021-28316 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28316 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28316 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-28316 · Security Note
• https://bdu.fstec.ru/vul/2021-02155 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28316 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-28316 · Vendor Advisory
• https://t.me/hybgl/846 · Telegram Post
• https://t.me/cybersecuritytechnologies/3159 · Telegram Post
• https://t.me/defcon_news/73921 · Telegram Post
• https://t.me/pentestingnews/449 · Telegram Post
• https://t.me/cybersecuritytechnologies/3156 · Telegram Post
• https://twitter.com/ptracesecurity/status/1698078460592193818 · Twitter Post
• https://t.me/cvenotify/13300 · Telegram Post
• https://t.me/cybersecuritytechnologies/3279 · Telegram Post