CVE-2017-0007

Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associated signatures, aka "PowerShell Security Feature Bypass Vulnerability."

Score

CVSS 3.0 5.5 Medium

Status

Modified - secure@microsoft.com

Published

2017-03-17

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Windows 10 (Microsoft)
• Windows Server 2016 (Microsoft)
• Device Guard (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/96018
• http://www.securitytracker.com/id/1038001
• https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0007