CVE-2021-36934 Windows Elevation of Privilege

Windows Elevation of Privilege Vulnerability

Recent assessments:

Dviros at July 25, 2021 9:35am UTC reported:

Vulnerability is easy to exploit – by interacting with the local ShadowCopy volume, and copying it to a local folder, attackers can easily elevate their privileges.
Several exploits were already released, allowing to parse the hashes while copying the SAM\SECURITY\SYSTEM hives:
<https://github.com/cube0x0/CVE-2021-36934&gt;
<https://github.com/HuskyHacks/ShadowSteal&gt;

This vulnerability occurs due to the permissive “C:\Windows\System32\Config*.*” privileges, “BUILTIN\Users”, allowing any user to read and execute the files.

ccondon-r7 at July 21, 2021 4:24pm UTC reported:

Vulnerability is easy to exploit – by interacting with the local ShadowCopy volume, and copying it to a local folder, attackers can easily elevate their privileges.
Several exploits were already released, allowing to parse the hashes while copying the SAM\SECURITY\SYSTEM hives:
<https://github.com/cube0x0/CVE-2021-36934&gt;
<https://github.com/HuskyHacks/ShadowSteal&gt;

This vulnerability occurs due to the permissive “C:\Windows\System32\Config*.*” privileges, “BUILTIN\Users”, allowing any user to read and execute the files.

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 5