← volver
CVE-2021-1675

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 86.1%● KEV
En resumen

Una vulnerabilidad en el Servicio de Cola de Impresión de Windows permite que atacantes ejecuten código malicioso remotamente en una computadora sin necesidad de permisos especiales. Un atacante puede explotar esto enviando solicitudes especialmente diseñadas al servicio de impresión, potencialmente tomando control total del sistema afectado.

Detalle técnico

El servicio Windows Print Spooler no valida adecuadamente las solicitudes del cliente, permitiendo ejecución remota de código no autenticada a través de la interfaz RPC. Un atacante puede enviar un trabajo de impresión malicioso o llamada RPC que dispare ejecución de código arbitrario con privilegios SYSTEM, requiriendo solo acceso de red al puerto 445 o puertos similares de servicio de impresión.

Resumen generado y traducido por IA a partir de la descripción oficial.
Windows Print Spooler Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Productos afectados
Microsoft · Windows 10 Version 1507Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 1909Microsoft · Windows 10 Version 2004Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H1Microsoft · Windows 7Microsoft · Windows 7 Service Pack 1Microsoft · Windows 8.1Microsoft · Windows Server 2008 R2 Service Pack 1Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft · Windows Server 2012Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2012 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server version 2004Microsoft · Windows Server version 20H2
PoCs públicas encontradas — 48
githubgithub.com/cube0x0/CVE-2021-1675★ 1990githubgithub.com/calebstewart/CVE-2021-1675★ 1100githubgithub.com/hlldz/CVE-2021-1675-LPE★ 325githubgithub.com/LaresLLC/CVE-2021-1675★ 214githubgithub.com/ly4k/PrintNightmare★ 209githubgithub.com/mstxq17/CVE-2021-1675_RDL_LPE★ 145githubgithub.com/sailay1996/PrintNightmare-LPE★ 77githubgithub.com/evilashz/CVE-2021-1675-LPE-EXP★ 56githubgithub.com/cybersecurityworks553/CVE-2021-1675_PrintNightMare★ 23githubgithub.com/JumpsecLabs/PrintNightmare★ 19githubgithub.com/eversinc33/NimNightmare★ 18githubgithub.com/k8gege/cve-2021-1675★ 15githubgithub.com/Wra7h/SharpPN★ 10githubgithub.com/Leonidus0x10/CVE-2021-1675-SCANNER★ 9githubgithub.com/corelight/CVE-2021-1675★ 9githubgithub.com/exploitblizzard/PrintNightmare-CVE-2021-1675★ 5githubgithub.com/thomasgeens/CVE-2021-1675★ 3githubgithub.com/hahaleyile/my-CVE-2021-1675★ 3githubgithub.com/bartimusprimed/CVE-2021-1675-Yara★ 2githubgithub.com/ozergoker/PrintNightmare★ 2githubgithub.com/kondah/patch-cve-2021-1675★ 2githubgithub.com/yu2u/CVE-2021-1675★ 2githubgithub.com/killtr0/CVE-2021-1675-PrintNightmare★ 2githubgithub.com/DLL00P/CVE-2021-1675★ 1githubgithub.com/puckiestyle/CVE-2021-1675★ 1githubgithub.com/Winter3un/CVE-2021-1675★ 1githubgithub.com/OppressionBreedsResistance/CVE-2021-1675-PrintNightmare★ 1githubgithub.com/peckre/PNCVE-Win10-20H2-Exploit★ 1githubgithub.com/whoami-chmod777/CVE-2021-1675-CVE-2021-34527★ 1githubgithub.com/galoget/PrintNightmare-CVE-2021-1675-CVE-2021-34527★ 0githubgithub.com/zha0/Microsoft-CVE-2021-1675★ 0githubgithub.com/whoami-chmod777/CVE-2021-1675---PrintNightmare-LPE-PowerShell-★ 0githubgithub.com/kougyokugentou/CVE-2021-1675★ 0githubgithub.com/mrezqi/CVE-2021-1675_CarbonBlack_HuntingQuery★ 0githubgithub.com/tanarchytan/CVE-2021-1675★ 0githubgithub.com/initconf/cve-2021-1675-printnightmare★ 0githubgithub.com/ptter23/CVE-2021-1675★ 0githubgithub.com/thalpius/microsoft-cve-2021-1675★ 0githubgithub.com/0xSs0rZ/Windows_Exploit★ 0githubgithub.com/r1skkam/PrintNightmare★ 0githubgithub.com/000Tonio/cve-2021-1675★ 0githubgithub.com/Sp4ceDogy/NPE-CS-V-CVE-2021-1675★ 0githubgithub.com/CameraShutterBug/PrintNightmare★ 0githubgithub.com/ccordeiro/CVE-2021-1675★ 0githubgithub.com/edsonjt81/CVE-2021-1675★ 0cve_referencepacketstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.htmlno verificadocve_referencepacketstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.htmlno verificadocve_referencepacketstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.htmlno verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.htmlhttp://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.htmlhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1675https://www.kb.cert.org/vuls/id/383432