Microsoft Windows PowerShell CVE-2017-8565 Remote Code Execution Vulnerability

Description: Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka “Windows PowerShell Remote Code Execution Vulnerability”.

Impact:  Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions.

Mitigation: Updates are available. Please check specific vendor advisory for more information.

Reference URL’s:

• http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8565
• http://www.securityfocus.com/bid/99394/info
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8565

Recommended Posts

Press release April 2023: Situational Security Alerts from CIRT

21 Apr 2023 - Articles, English articles, News, Notice, Security Advisories & Alerts

Security Best Practices

29 Mar 2023 - Security Advisories & Alerts

Dropbox discloses breach after hacker stole 130 GitHub repositories

02 Nov 2022 - Security Advisories & Alerts