Jul 3, 2021

PrintNightmare, Critical Windows Print Spooler Vulnerability

See Microsoft's new guidance for the Print spooler vulnerability (CVE-2021-34527) and apply the necessary workarounds. 

“while Microsoft has released an update for CVE-2021-1675, it is important to realize that this update does not address the public exploits that also identify as CVE-2021-1675.” An attacker can exploit this vulnerability—nicknamed PrintNightmare—to take control of an affected system.

 

 [*] Searching cve-[['2021-34527']] vulnerability definitions within Kenna.VI+....


[ CVE Description ]
 [*] CVE_ID : CVE-2021-34527
 [_] Desc   : Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in the Print Spooler service. By persuading a victim to open a specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with SYSTEM privileges.

 [_] C:2021-06-10 / P:2021-07-01 / L:2021-07-01
 [*] Vuln Risk           : 25.0
 [*] Exploited [trend]   : 0 [holding]
 [_] Exploit/likehood    : False/None

 [*] Malware sample : 0
 [*] Exploits/POC   : [0]
 [_] Fixes          : [0]
 [_] Threat Actors  : [0]
 [_] CVSS2 / CVSS3  : [ 7.2 / 7.8 ]

 [_] Vuln Products  : [0]

[ CVE Malware Family Info : None ]

[ High_Profile_Vulnerability ]
 [!!!]   CVE-2021-34527 (25.0) : []


 ** [5] threads completed [2 tasks] / [1.8 KB] within [1.94 sec].