Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SMB_NT_SERIOUS_SAM_CHECK.NBIN
HistoryJul 27, 2021 - 12:00 a.m.

Windows SeriousSAM HiveNightmare Registry Read Vulnerability

2021-07-2700:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
72

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Binary data smb_nt_serious_sam_check.nbin
VendorProductVersion
microsoftwindows