Microsoft has fixed a vulnerability in the PsExec utility that allows local users to gain elevated privileges on Windows devices. The utility is designed to allow administrators to perform various activities on remote computers. In December 2020, Tenable researcher David Wells discovered a vulnerability. Microsoft released PsExec v2.30 to resolve the vulnerability, but Wells stated that minor adjustments to his PoC could bypass the fix. He gave Microsoft ninety days to fix the flaw, and when Microsoft did not, he disclosed the flaw and released a working PoC.
Source: https://www.bleepingcomputer.com/news/security/microsoft-fixes-windows-psexec-privilege-elevation-vulnerability/

