PT-2021-4805 · Microsoft · Windows Server+2

Andrew Bartlett · Published 2021-11-09 · Updated 2026-03-10 · CVE-2021-42278

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions prior to the fixed version Microsoft Active Directory Domain Services (affected versions not specified)

Description The issue is related to insecure privilege management in Active Directory Domain Services, allowing a remote attacker to elevate privileges in the system. This is an elevation-of-privilege vulnerability that can affect the system.

Recommendations For Microsoft Windows Server versions prior to the fixed version, update to the latest version to resolve the issue. For Microsoft Active Directory Domain Services, consider restricting access to sensitive areas of the system until a patch is available. As a temporary workaround, consider disabling any features that rely on privilege escalation until a patch is available.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2021-05532

CVE-2021-42278

Affected Products

Active Directory Domain Services

Windows Server

Windows

References · 93

• 🔥 https://github.com/WazeHell/sam-the-admin · Exploit
• 🔥 https://github.com/safebuffer/sam-the-admin · Exploit
• 🔥 https://github.com/Ridter/noPac · Exploit
• 🔥 https://github.com/ly4k/Pachine · Exploit
• 🔥 https://github.com/waterrr/noPac · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-42278 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-42278 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42278 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42278 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42278 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42278 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05532 · Security Note
• https://t.me/redteambro/81 · Telegram Post
• https://t.me/redteambro/79 · Telegram Post
• https://t.me/win_def/61 · Telegram Post