Windows 重定向驱动缓冲系统特权漏洞提升
CVE编号
CVE-2021-36973利用情况
暂无补丁情况
N/A披露时间
2021-09-14漏洞描述
Microsoft microsoft Windows Redirected Drive Buffering是美国微软（Microsoft）公司的重定向驱动器缓冲子系统 (RDBSS) 作为内核模式文件系统驱动程序rdbss.sys 提供，它包含在操作系统中，作为静态库rdbsslib.lib 提供，它包含在 Windows 驱动程序工具包 (WDK) 中）。 microsoft Windows Redirected Drive Buffering存在权限许可和访问控制问题漏洞。以下产品和版本受到影响：Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version 2004 for x64-based Systems,Windows Server, version 2004 (Server Core installation),Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for 32-bit Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2016 (Server Core installation),Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 1909 for ARM64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 2004 for 32-bit Systems,Windows 10 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows Server 2016解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36973- 攻击路径 本地
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| CWE-269 | 特权管理不恰当 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论