CVE-2017-11818

Опубликовано: 13 окт. 2017

Источник: nvd

CVSS3: 4.5

CVSS2: 4.4

EPSS Низкий

Описание

The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass vulnerability when it fails to validate an integrity-level check, aka "Windows Storage Security Feature Bypass Vulnerability".

Ссылки

http://www.securityfocus.com/bid/101101
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039526
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11818
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101101
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039526
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11818
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01648

Низкий

4.5 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-254

Связанные уязвимости

CVE-2017-11818

CVSS3: 4.5

msrc

больше 7 лет назад

Windows Storage Security Feature Bypass Vulnerability

GHSA-v5cx-4469-frm4

CVSS3: 4.5

github

около 3 лет назад

EPSS

Процентиль: 81%

0.01648

Низкий

4.5 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-254