Get a Pentest and security assessment of your IT network.

Cyber Security

Microsoft fixes Windows PSExec privilege elevation vulnerability

Microsoft has fixed a vulnerability in the PsExec utility that allows local users to gain elevated privileges on Windows devices. The utility is designed to allow administrators to perform various activities on remote computers. In December 2020, Tenable researcher David Wells discovered a vulnerability. Microsoft released PsExec v2.30 to resolve the vulnerability, but Wells stated that minor adjustments to his PoC could bypass the fix. He gave Microsoft ninety days to fix the flaw, and when Microsoft did not, he disclosed the flaw and released a working PoC.

Source: https://www.bleepingcomputer.com/news/security/microsoft-fixes-windows-psexec-privilege-elevation-vulnerability/

Related posts
Cyber Security

Ashley Madison 2.0 Hackers Leak 20GB Data Dump, Including CEO's Emails

Cyber Security

Art of Twitter account hacking

Cyber Security

Alexa Eavesdropping Flub Re-Sparks Voice Assistant Privacy Debate

Cyber Security

Dan Geer, Richard Thieme on specialization in security