PT-2021-7662 · Microsoft+1 · Windows Com Server+2

Dlive · Published 2021-01-11 · Updated 2023-08-01 · CVE-2021-26414

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Windows DCOM Server (affected versions not specified)

Description The vulnerability in the Windows DCOM Server is related to errors in security settings, allowing a remote attacker to bypass authentication procedures and elevate their privileges. This issue can affect the system, potentially leading to security breaches.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2023-01097

CVE-2021-26414

Affected Products

Check Point Gaia

Windows

Windows Com Server

References · 13

• https://bdu.fstec.ru/vul/2023-01097 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26414 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26414 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-26414 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26414 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26414 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26414 · Security Note
• http://packetstormsecurity.com/files/163206/Windows-Kerberos-AppContainer-Enterprise-Authentication-Capability-Bypass.html · Note
• https://cybersecurity-help.cz/vdb/SB2022102043 · Note
• https://t.me/canyoupwnme/6833 · Telegram Post
• https://t.me/sysadm_in_channel/4362 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021060835 · Note
• https://t.me/cvenotify/36001 · Telegram Post