CVE-2021-1693

EUVD-2021-7160 · Published Jan 12, 2021

Windows CSC Service Elevation of Privilege Vulnerability

Technologies

Microsoft Windows 10Microsoft Windows 7Microsoft Windows Server 2008Microsoft Windows Server 2019Microsoft Windows Rt 8.1Microsoft Windows Server 2016Microsoft Windows Server 2012Microsoft Windows 8.1

Weaknesses

CWE-269

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation T1548Abuse Elevation Control Mechanism

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1693
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1693

Potentially impacted assets

See if this affects your attack surface