High ยท published November 13, 2019
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 98.2th percentile for exploit probability.
๐จ A careless UPnP service is allowing attackers to create COM objects, like a bouncer letting in anyone with a fake ID! Think of it as a club where the security checks IDs but forgets to check if the person is even on the guest list โ they just need the right story to get in! An attacker could leverage this vulnerability to elevate their privileges, gaining access to perform any action they desire on the system. This could result in unauthorized data access, system modifications, or even a complete takeover of the affected device!
Think of it as a club where the security checks IDs but forgets to check if the person is even on the guest list โ they just need the right story to get in! This elevation of privilege vulnerability in the Windows UPnP service arises because it improperly allows the creation of COM objects by untrusted sources, giving attackers a way to escalate their permissions.
An attacker could leverage this vulnerability to elevate their privileges, gaining access to perform any action they desire on the system. This could result in unauthorized data access, system modifications, or even a complete takeover of the affected device! Immediately apply patches provided by Microsoft to address this vulnerability. Disabling UPnP if it's not in use can also help reduce exposure. Ensure your security settings are configured to limit unauthorized access and regularly audit your system for vulnerabilities. You've got this! By taking these steps, you'll help keep your system safe and sound! ๐ก๏ธ
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | all versions | โ |
| microsoft/windows_10_1507 | all versions | โ |
| microsoft/windows_10_1607 | all versions | โ |
| microsoft/windows_10_1607 | all versions | โ |
| microsoft/windows_10_1709 | all versions | โ |
| microsoft/windows_10_1709 | all versions | โ |
| microsoft/windows_10_1709 | all versions | โ |
| microsoft/windows_10_1803 | all versions | โ |
| microsoft/windows_10_1803 | all versions | โ |
| microsoft/windows_10_1803 | all versions | โ |
| microsoft/windows_10_1809 | all versions | โ |
| microsoft/windows_10_1809 | all versions | โ |
| microsoft/windows_10_1809 | all versions | โ |
| microsoft/windows_10_1903 | all versions | โ |
| microsoft/windows_10_1903 | all versions | โ |
| microsoft/windows_10_1903 | all versions | โ |
| microsoft/windows_7 | all versions | โ |
| microsoft/windows_7 | all versions | โ |
| microsoft/windows_8.1 | all versions | โ |
| microsoft/windows_rt_8.1 | all versions | โ |
| microsoft/windows_server_1803 | all versions | โ |
| microsoft/windows_server_1903 | all versions | โ |
| microsoft/windows_server_2008 | all versions | โ |
| microsoft/windows_server_2008 | all versions | โ |
| microsoft/windows_server_2008 | all versions | โ |
| microsoft/windows_server_2012 | all versions | โ |
| microsoft/windows_server_2012 | all versions | โ |
| microsoft/windows_server_2016 | all versions | โ |
| microsoft/windows_server_2019 | all versions | โ |