KLA20226 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

1. A security feature bypass vulnerability in Microsoft Defender for Endpoint can be exploited remotely to bypass security restrictions.
2. An elevation of privilege vulnerability in Microsoft Defender for IoT can be exploited remotely to gain privileges.

Original advisories

CVE-2023-21809

CVE-2023-23379

Related products

Microsoft-Defender-for-IoT

CVE list

CVE-2023-21809 critical

CVE-2023-23379 critical

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Microsoft Defender Security Intelligence UpdatesMicrosoft Defender for IoT