PT-2022-6124 · Microsoft · Windows Backup Service+1

Filip Dragovic · Published 2022-01-10 · Updated 2024-05-29 · CVE-2023-21752

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Backup Service versions prior to the fixed version

Description The issue is related to errors in privilege management within the Windows Backup Service, allowing an attacker to elevate their privileges to the level of SYSTEM. This can potentially impact the system, enabling malicious activities. There have been public proofs of concept (PoCs) released, demonstrating the ability to delete any file and launch a shell with elevated privileges.

Recommendations For Windows Backup Service versions prior to the fixed version, consider disabling the vulnerable service until a patch is available to prevent potential exploitation. Restrict access to the Windows Backup Service to minimize the risk of elevation of privilege attacks. Avoid using the service for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Improper Access Control

Weakness Enumeration

CWE-284

CWE-264

Related Identifiers

BDU:2023-00067

CVE-2023-21752

Affected Products

Windows

Windows Backup Service

References · 23

• 🔥 https://github.com/MzHmO/Exploit-Street/tree/main/2023/CVE-2023-21752 · Exploit
• 🔥 https://github.com/Wh04m1001/CVE-2023-21752 · Exploit
• 🔥 https://exploit-db.com/exploits/51203 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-21752 · Security Note
• https://bdu.fstec.ru/vul/2023-00067 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-21752 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-21752 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21752 · Security Note
• https://github.com/Wh04m1001/RazerEoP · Note
• https://t.me/avleonovcom/1071 · Telegram Post
• https://t.me/cybersecuritytechnologies/7538 · Telegram Post
• https://t.me/ckure/12129 · Telegram Post
• https://t.me/p0x3k/1354 · Telegram Post
• https://t.me/ckured/246 · Telegram Post