Kaspersky LabKLA63962KLA63962 PE vulnerability in Microsoft System Center
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges.
Original advisories
Related products
Microsoft-Defender-for-Endpoint-for-Windows
CVE list
CVE-2024-21315 critical
KB list
Solution
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Impacts
- PE
Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.
Affected Products
- Microsoft Defender for Endpoint for Windows
References
support.microsoft.com/kb/5032189
support.microsoft.com/kb/5032190
support.microsoft.com/kb/5032192
support.microsoft.com/kb/5032196
support.microsoft.com/kb/5032197
support.microsoft.com/kb/5032198
support.microsoft.com/kb/5032199
support.microsoft.com/kb/5032202
support.microsoft.com/kb/5032247
support.microsoft.com/kb/5034819
support.microsoft.com/kb/5034830
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21315
statistics.securelist.com/
threats.kaspersky.com/en/product/Microsoft-Defender-for-Endpoint-for-Windows/
threats.kaspersky.com/en/product/Microsoft-Windows/
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%