Exploit Released for Workable Windows HTTP Bug

ByPR 24

A security researcher has published a PoC test code to exploit a worm-like vulnerability (CVE-2021-31166) in Windows IIS server.

The issue scored 9.8 out of 10 maximum on the CVSSv3 scale and is a memory corruption vulnerability in the HTTP protocol stack included in recent versions of Windows. The stack is used by the embedded Windows IIS server. If the server is turned on, an attacker can send a specially crafted packet and execute malicious code right in the operating system kernel.

While the vulnerability appears to be extremely dangerous, there are also several factors that mitigate the risk. First, the issue only affects the latest versions of Windows, including Windows 10 2004 and 20H2, as well as Windows Server 2004 and 20H2.

Former Microsoft engineer Axel Souchet also published PoC code to exploit the vulnerability, but the code does not include the possibility of worm-like infection of networks, but only causes the Windows system to crash.

Similar Posts

Siemens Patches Critical Security Flaw in Certain Products

Siemens Patches Critical Security Flaw in Certain Products

ByPR 24

Governance & Risk Management , IT Risk Management , Patch Management Vulnerability Affects Siemens SIMATIC S7-1200 and S7-1500 CPU Akshaya Asokan (asokan_akshaya) • June 1, 2021     (Photo: Siemens) Siemens has released patches for certain automation products that have a critical memory protection vulnerability, which attackers could exploit to run arbitrary code to access…

High Threat Security Alert (A21-08-06): Multiple Vulnerabilities in Microsoft Products (August 2021)

High Threat Security Alert (A21-08-06): Multiple Vulnerabilities in Microsoft Products (August 2021)

ByPR 24

Description: Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. The list of security updates can be found at: https://msrc.microsoft.com/update-guide/en-us/releaseNote/2021-Aug Reports indicated that an elevation of privilege vulnerability in Microsoft Windows 10 and some versions of Windows Server (CVE-2021-36948) is being actively exploited and multiple vulnerabilities in Microsoft Windows…

Department of Justice Reclaims Millions of Dollars Paid to Colonial’s Attackers

Department of Justice Reclaims Millions of Dollars Paid to Colonial’s Attackers

ByPR 24

The US Justice Department has recovered most of the multimillion-dollar ransom payment The Guardian reports.   The operation to recover cryptocurrency from the Russian-based hacking group is the first carried out by the Biden administration’s task force specializing in ransomware. Moreover, it reflects what officials say is an increasingly aggressive approach to dealing with a…

5 Agencies Using Pulse Secure VPNs Possibly Breached

5 Agencies Using Pulse Secure VPNs Possibly Breached

ByPR 24

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Fraud Risk Management Suspicious Activity Detected; Investigation Continues Scott Ferguson (Ferguson_Writes) • April 30, 2021     The Cybersecurity and Infrastructure Security Agency is investigating whether five government agencies may have been breached when attackers exploited vulnerabilities in Pulse Connect Secure VPN products, according to…

Critical RCE Flaw in ForgeRock Access Manager Under Active Attack – KK Hack Labs

Critical RCE Flaw in ForgeRock Access Manager Under Active Attack – KK Hack Labs

ByPR 24

Cybersecurity agencies in Australia and the U.S. are warning of an actively exploited vulnerability impacting ForgeRock’s OpenAM access management solution that could be leveraged to execute arbitrary code on an affected system remotely.“The [Australian Cyber Security Centre] has observed actors exploiting this vulnerability to compromise multiple hosts and deploy additional malware and tools,”

Despite Microsoft Patch, US Gov’t Warns of ‘Active Threat Still Developing’ From Open Back Doors

Despite Microsoft Patch, US Gov’t Warns of ‘Active Threat Still Developing’ From Open Back Doors

ByPR 24

Reuters reports: The White House on Sunday urged computer network operators to take further steps to gauge whether their systems were targeted amid a hack of Microsoft Corp’s Outlook email program, saying a recent software patch still left serious vulnerabilities. “This is an active threat still developing and we urge network operators to take it…