PT-2021-4685 · Microsoft · Console Window Host+1

Masthoon · Published 2021-10-12 · Updated 2023-08-01 · CVE-2021-41346

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Console Window Host (affected versions not specified)

Description The issue is related to errors in security settings of the Console Window Host component in Microsoft Windows operating systems. This allows an attacker to bypass security restrictions. There is a security-feature bypass vulnerability that enables attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2021-05380

CVE-2021-41346

Affected Products

Console Window Host

Windows

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41346 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-41346 · Security Note
• https://bdu.fstec.ru/vul/2021-05380 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41346 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-41346 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-41346 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41346 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/4555 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021101258 · Note