PXEThief

PXEThief PXEThief は、DEF CON 30 の講演 Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 で議論された攻撃パスを、Microsoft Endpoint Configuration Manager ConfigMgr、依然として一般的に SCCM として知られる の Operating System Deployment 機能に対して実装するツール群です。このツールは、構成された Network Access Accounts...

Vulnerability of Windows operating system deployment services, allowing attackers to trigger service failures

The vulnerability of Windows operating system deployment services is related to improper resource cleaning. Exploiting this vulnerability can allow a remote attacker to cause service failures...

HCL Technologies BigFix OSD 注入漏洞

HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. for operating system deployment. A security vulnerability exists in HCL Technologies BigFix OSD Bare Metal Server version 311.12 and prior versions, which stems from the inclusion of a host header...

HCL Technologies BigFix OSD 加密问题漏洞

HCL Technologies BigFix OSD is part of a lifecycle management software from HCL Technologies, Inc. for operating system deployment. A security vulnerability exists in the HCL Technologies BigFix OSD that stems from the server using an insecure encryption algorithm...

Dell KACE K2000 Web Detection

The web interface for a Dell KACE K2000 appliance was detected on the remote host. The K2000 is used to deploy operating system installations via the network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53492; scriptversion"1.8"; scriptcvsdate"Date: 2020/01/22";...