Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Haruki Yadani

Researcher fromLAC through IPA
#33960of 56,334
7.8Total CVSS
Vulnerabilities · 1
PT-2023-6915
7.8
2023-02-10
Unknown · Pc Settings Tool · CVE-2023-25011
**Name of the Vulnerable Software and Affected Versions** PC settings tool versions 10.1.26.0 and earlier PC settings tool versions 11.0.22.0 and earlier **Description** The issue is related to a lack of authentication for a critical function in the PC Settings Tool. This can be exploited to allow an attacker to elevate their privileges. Specifically, an attacker can write to the registry with administrator privileges using only standard user privileges. **Recommendations** For PC settings tool versions 10.1.26.0 and earlier, update to a version that includes a fix for this issue. For PC settings tool versions 11.0.22.0 and earlier, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the registry to minimize the risk of exploitation.