Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-59287 - WSUS / SCCM RCE Based on the original exploi...

CVE-2020-12320

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

EUVD-2020-3885

Malware in sbrugna...

EUVD-2019-8676

Malware in sbrugna...

EUVD-2021-25578

Malware in sbrugna...

EUVD-2020-4632

Malware in sbrugna...

EUVD-2023-26602

Malicious code in bioql PyPI...

CVE-2021-39190

The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM version 1802 to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist...

Get NAA Credentials

This module attempts to retrieve the Network Access Accounts, if configured, from the SCCM server. This requires a computer account, which can be added using the samraccount module. Module Options msf use auxiliary/admin/sccm/getnaacredentials msf auxiliarygetnaacredentials show actions...

CVE-2024-21938

Summary: CVE-2024-21938 concerns the AMD Management Plugin for Microsoft System Center Configuration Manager (SCCM). The root cause is incorrect default permissions in the SCCM installation directory, which could let a low-privilege attacker escalate privileges and potentially achieve arbitrary c...

PT-2024-19121 · Microsoft +1 · System Center Configuration Manager +1

Name of the Vulnerable Software and Affected Versions: AMD Management Plugin for Microsoft System Center Configuration Manager SCCM versions prior to 7.0.0.1318 Description: The issue is related to incorrect default permissions in the AMD Management Plugin for the Microsoft System Center...

AMD Management Plugin for SCCM Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9005 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary An incorrect default permissions vulnerability is identified within the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM. The plugin is...

New Attack Technique Exploits Microsoft Management Console Files

Threat actors are exploiting a novel attack technique in the wild that leverages specially crafted management saved console MSC files to gain full code execution using Microsoft Management Console MMC and evade security defenses. Elastic Security Labs has codenamed the approach GrimResource after...

VDA upgrade failure when deployed through SCCM

VDA deployment using SCCM...

CVE-2023-22440

Incorrect default permissions in the IntelR SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in the IntelR SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22440

The CVE-2023-22440 issue affects Intel® SCS Add-on software installer for Microsoft SCCM (all versions). The root cause is incorrect default permissions, which could allow an authenticated user to escalate privileges via local access. The Intel advisory notes no updates will be released and recom...

CVE-2023-22440

Incorrect default permissions in the IntelR SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22440

Incorrect default permissions in the IntelR SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® SCS Add-on Software Installer Advisory

Summary: A potential security vulnerability in the Intel® Setup and Configuration Software SCS Add-on software installer for Microsoft System Center Configuration Manager SCCM may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued...