PT-2025-31115 · Crowdstrike · Defendpoint

Name of the Vulnerable Software and Affected Versions: Symantec Defendpoint versions prior to 25.4.270.0 Description: Prior to version 25.4.270.0, when wmic.exe is elevated with a full admin token, a user can stop the Defendpoint service, bypassing anti-tamper protections. Once the service is...