Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12044
HistoryJan 12, 2021 - 12:00 a.m.

KLA12044 ACE vulnerability in Microsoft System Center

2021-01-1200:00:00
Kaspersky Lab
threats.kaspersky.com
49

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.092 Low

EPSS

Percentile

94.7%

JSON

A remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

CVE-2021-1647

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Windows

Windows-Defender

CVE list

CVE-2021-1647 critical

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • Microsoft System Center 2012 R2 Endpoint ProtectionMicrosoft Security EssentialsMicrosoft System Center 2012 Endpoint ProtectionWindows DefenderMicrosoft System Center Endpoint Protection

Related

nvd 1
attackerkb 1
threatpost 3
openvas 2
cvelist 1
prion 1
cve 1
nessus 2
thn 2
cisa_kev 1
cisa 1
githubexploit 1
rapid7blog 2
mscve 1
checkpoint_advisories 1
malwarebytes 1
qualysblog 3
krebs 1
securelist 1
avleonov 1
nvd
nvd
CVE-2021-1647
2021-01-12 20:15:30
attackerkb
attackerkb
CVE-2021-1647 Microsoft Windows Defender Zero-Day Vulnerability
2021-01-12 00:00:00
threatpost
threatpost
North Korea Targets Security Researchers in Elaborate 0-Day Campaign
2021-01-26 14:49:03
Twitter Suspends Accounts Used to Snare Security Researchers
2021-10-18 16:23:21
Critical Microsoft Defender Bug Actively Exploited; Patch Tuesday Offers 83 Fixes
2021-01-12 21:45:23
openvas
openvas
Microsoft Windows Defender Antimalware Platform Remote Code Execution Vulnerability (Jan 2021)
2021-01-13 00:00:00
Microsoft Security Essentials Remote Code Execution Vulnerability (Jan 2021)
2021-01-13 00:00:00
cvelist
cvelist
CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability
2021-01-12 19:42:01
prion
prion
Remote code execution
2021-01-12 20:15:00
cve
cve
CVE-2021-1647
2021-01-12 20:15:30
nessus
nessus
Security Update for Forefront Endpoint Protection (January 2021)
2021-01-12 00:00:00
Security Update for Windows Defender (January 2021)
2021-01-12 00:00:00
thn
thn
N. Korean Hackers Targeting Security Experts to Steal Undisclosed Researches
2021-01-26 05:10:00
Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws
2021-01-13 05:01:00
cisa_kev
cisa_kev
Microsoft Defender Remote Code Execution Vulnerability
2021-11-03 00:00:00
cisa
cisa
RCE Vulnerability Affecting Microsoft Defender
2021-01-14 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-01-20 10:05:00
rapid7blog
rapid7blog
State-Sponsored Threat Actors Target Security Researchers
2021-01-26 15:01:33
Patch Tuesday - January 2021
2021-01-12 23:59:00
mscve
mscve
Microsoft Defender Remote Code Execution Vulnerability
2021-01-12 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Defender Remote Code Execution (CVE-2021-1647)
2021-01-12 00:00:00
malwarebytes
malwarebytes
Microsoft issues 83 patches, one for actively exploited vulnerability
2021-01-13 19:40:58
qualysblog
qualysblog
January 2021 Patch Tuesday – 83 Vulnerabilities, 10 Critical, One Zero Day, Adobe
2021-01-12 20:01:43
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
krebs
krebs
Microsoft Patch Tuesday, January 2021 Edition
2021-01-13 01:32:20
securelist
securelist
IT threat evolution Q1 2021. Non-mobile statistics
2021-05-31 10:00:05
avleonov
avleonov
Vulristics: Microsoft Patch Tuesdays Q1 2021
2021-03-26 02:47:52

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.092 Low

EPSS

Percentile

94.7%

JSON
Related for KLA12044
nvd1attackerkb1threatpost3openvas2cvelist1prion1cve1nessus2thn2cisa_kev1cisa1githubexploit1rapid7blog2mscve1checkpoint_advisories1malwarebytes1qualysblog3krebs1securelist1avleonov1