CVE-2018-0952

EPSS 6.2%

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.

Affected products

Microsoft · Microsoft Visual Studio Microsoft · Windows 10 Microsoft · Windows 10 Servers Microsoft · Windows Server 2016

public PoCs found — 3

githubgithub.com/atredispartners/CVE-2018-0952-SystemCollector★ 110 cve_referencewww.exploit-db.com/exploits/45244/unverified exploitdbwww.exploit-db.com/exploits/45244unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952 https://www.exploit-db.com/exploits/45244/http://www.securityfocus.com/bid/105048 http://www.securitytracker.com/id/1041466