PT-2017-2554
CVE-2017-8565
·
Published
2017-07-11
·
Updated
2019-10-03
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 versions 1511 through 1703, and Windows Server 2016
Description
The issue is related to inadequate access control when a CIM Instance is wrapped by a PSObject, allowing a remote code execution. This can enable a remote attacker to execute arbitrary code.
Recommendations
For Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 versions 1511 through 1703, and Windows Server 2016, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾