MS Enterprise app management service RCE. CVE-2022-35841

TL;DR A remote command execution and local privilege escalation vulnerability has been fixed by Microsoft as part of September’s patch Tuesday. The vulnerability, filed under CVE-2022-35841, affects the Enterprise App Management Service which handles the installation of enterprise applications...

DCOM Exec

A similar approach to psexec but executing commands through DCOM. You can select different objects to be used to execute the commands. Module Options msf use auxiliary/scanner/smb/impacket/dcomexec msf undefineddcomexec show actions ...actions... msf undefineddcomexec set ACTION msf...