PT-2023-6915 · Unknown · Pc Settings Tool

Haruki Yadani

·

Published

2023-02-10

·

Updated

2025-03-19

·

CVE-2023-25011

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PC settings tool versions 10.1.26.0 and earlier PC settings tool versions 11.0.22.0 and earlier
Description The issue is related to a lack of authentication for a critical function in the PC Settings Tool. This can be exploited to allow an attacker to elevate their privileges. Specifically, an attacker can write to the registry with administrator privileges using only standard user privileges.
Recommendations For PC settings tool versions 10.1.26.0 and earlier, update to a version that includes a fix for this issue. For PC settings tool versions 11.0.22.0 and earlier, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the registry to minimize the risk of exploitation.

Fix

Missing Authentication

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-306CWE-269

Related Identifiers

BDU:2023-07933
CVE-2023-25011

Affected Products

Pc Settings Tool