PT-2021-3734 · Unknown+1 · Блокхост-Сеть+1

Published 2021-08-09 · Updated 2021-08-09

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Блокхост-Сеть (affected versions not specified) Блокхост-Сеть К (affected versions not specified)

Description The issue is related to the use of the regsvr32 component in the operating system, which can be exploited by an attacker with administrative privileges to run any application, bypassing the closed software environment mechanism.

Recommendations For Блокхост-Сеть and Блокхост-Сеть К, consider restricting access to the regsvr32 component as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-114

Related Identifiers

BDU:2021-03979

Affected Products

Regsvr32

Блокхост-Сеть

References · 3

• https://bdu.fstec.ru/vul/2021-03979 · Security Note
• https://attack.mitre.org/techniques/T1218/010 · Note
• https://gist.github.com/enigma0x3/469d82d1b7ecaf84f4fb9e6c392d25ba · Note