Incorrect permission assignment for critical resource in Microsoft Windows and Windows Server - CVE-2021-36958

Vulnerability identifier: #VU55790

CSH Severity: Medium

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-36958

CWE-ID: CWE-732

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists in Windows Print Spooler service due to improperly performed privileged file operations. A local user can send a specially crafted request to the Print Spooler service and execute arbitrary code with SYSTEM privileges.

Microsoft Windows
Windows Server
Solutions Enabler Virtual Appliance
Solutions Enabler
Unisphere 360
Unisphere for PowerMax Virtual Appliance
Unisphere for PowerMax
VASA Provider Standalone

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Solutions Enabler Virtual Appliance - addressed in versions 9.1.0.18, 9.2.3.0
Solutions Enabler - addressed in versions 9.1.0.18, 9.2.3.0
Unisphere 360 - addressed in versions 9.1.0.29, 9.2.3.3
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.1.0.31, 9.2.3.4
Unisphere for PowerMax - addressed in versions 9.1.0.31, 9.2.3.4
VASA Provider Standalone - addressed in versions 9.1.0.723, 9.2.3.0

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36958
• https://twitter.com/gentilkiwi/status/1416429860566847490

• Privilege escalation in Windows Print Spooler service
• Multiple vulnerabilities in Dell Unisphere for PowerMax, Dell Solutions Enabler, Dell Unisphere 360, Dell VASA