KLA12072 PE vulnerabilities in Microsoft System Center

An elevation of privilege vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to gain privileges.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in System Center Operations Manager can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Microsoft Defender can be exploited remotely to gain privileges.

Original advisories

CVE-2021-1728

CVE-2021-24092

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Windows

Microsoft-System-Center-Operations-Manager

Windows-Defender

CVE list

CVE-2021-1728 critical

CVE-2021-24092 critical

KB list

4601269

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• System Center 2019 Operations ManagerMicrosoft Endpoint ProtectionMicrosoft System Center 2012 R2 Endpoint ProtectionMicrosoft Security EssentialsMicrosoft System Center 2012 Endpoint ProtectionWindows DefenderMicrosoft System Center Endpoint Protection