Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-03-24. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2002-0367: smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
Post summary
The text merely announces a Windows smss.exe privilege‑escalation vulnerability that allows local users to gain administrator or SYSTEM rights.
https://research.lyrie.ai/research/active-exploit-cve-2002-0367-windows #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The tweet links to research indicating that CVE‑2002‑0367 is being actively exploited in the wild.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_2000 | - | - | - |
| OS | microsoft | windows_nt | 4.0 | - | - |
| OS | microsoft | windows_nt | 4.0 | - | - |