Main Vulnerability Database Vulnerabilities #VU49401

Input validation error in Microsoft products - CVE-2021-1647

Published: January 12, 2021 / Updated: October 5, 2021

Vulnerability identifier: #VU49401

CSH Severity: Critical

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-1647

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass specially crafted input to the application and execute arbitrary code on the system.

Note, the vulnerability is being actively exploited in the wild.

Affected software

Microsoft Security Essentials
Windows Defender
Microsoft System Center Endpoint Protection

How to mitigate CVE-2021-1647

Install updates from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #5545 - cve-2021-1647 (This is a sample downloaded from virustotal, so please don’t ask me for the source code. Thank you.) (June 9, 2021)

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1647

Related Security Bulletins

Remote code execution in Microsoft Defender