CVE-2021-36934

Published Jul 22, 2021

Last updated 3 months ago

Analyzed

Description

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system to exploit this vulnerability. After installing this security update, you must manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. Simply installing this security update will not fully mitigate this vulnerability. See <a href="https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7">KB5005357- Delete Volume Shadow Copies</a>.

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Known exploits

Data from CISA

Vulnerability name

Microsoft Windows SAM Local Privilege Escalation Vulnerability

Exploit added on

Feb 10, 2022

Exploit action due

Feb 24, 2022

Required action

Apply updates per vendor instructions.

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Source

secure@microsoft.com

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F8D40D82-1D88-4CF1-B961-F9F28426C56B",
            "versionEndExcluding": "10.0.17763.2114"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3DD2BDE6-67C6-48E2-BED0-12E4CC7EE6BC",
            "versionEndExcluding": "10.0.18363.1734"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "70336A6A-DE45-4604-BE81-10DA4DF12D3F",
            "versionEndExcluding": "10.0.19041.1165"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7AB7321A-1F89-48B3-8E5A-94791AB2BC86",
            "versionEndExcluding": "10.0.19042.1165"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2A860F2B-0533-46F7-879E-B932E4E44F0D",
            "versionEndExcluding": "10.0.19043.1165"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]