medium5.3Public exploit code
CVE-2017-11830
Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass2017-11-20 · local · windows · Verified
Impact
Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 1511, 1607, 1703, 1709 |
| Microsoft | Windows Server | Version 1709 |
| Microsoft | Windows Server 2016 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101714
- http://www.securitytracker.com/id/1039790
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830
- https://www.exploit-db.com/exploits/43162/
- http://www.securityfocus.com/bid/101714
- http://www.securitytracker.com/id/1039790
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830
- https://www.exploit-db.com/exploits/43162/