Exploit for #VU58034 Permissions, Privileges, and Access Controls in Windows Server

Vulnerability identifier: #VU58034

Vulnerability risk: Medium

CVSSv4.0: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2021-42287

CWE-ID: CWE-264

Exploitation vector: Network

Exploits in database: 10

• September 18, 2023
  • sam-the-admin (Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ) [Github]
• February 16, 2023
  • Invoke-noPac (.Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac) [Github]
• December 25, 2022
  • noPac (CVE-2021-42287/CVE-2021-42278 Exploiter) [Github]
• April 3, 2022
  • Invoke-sAMSpoofing (CVE-2021-42287/CVE-2021-42278 exploits in powershell) [Github]
• February 16, 2022
  • NoPacScan (NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than other script) [Github]
• December 14, 2021
  • Pachine (Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)) [Github]
• December 13, 2021
  • noPac (Exploiting CVE-2021-42278 and CVE-2021-42287) [Github]
  • noPac (Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ) [Github]
• December 12, 2021
  • sam-the-admin (Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ) [Github]
  • noPac (CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.) [Github]

Vulnerable software:
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft