Researchers Release POC for Windows WinSock Ancillary Privilege Escalation Vulnerability
Original title: POC Released for Windows WinSock Ancillary Privilege Escalation Vulnerability
Public POC for CVE-2023-21768 enables local attackers to escalate to SYSTEM privileges on Windows 11 22H2 through the afd.sys driver.
A public proof-of-concept exploit for CVE-2023-21768 was released showing how attackers with local access can gain SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. Researchers Valentina Palmiotti and Ruben Boonen published the code targeting vulnerable Windows 11 22H2 systems. The vulnerability was patched by Microsoft in January 2023 and requires low-level local privileges with no user interaction.
- The POC targets Windows 11 22H2 systems via afd.sys driver.
- Researchers completed the exploit in about one day.
- The technique changes I/O ring objects for kernel memory writes.
- A separate exploit was found in the wild by 360 IceSword Lab.
Impact: local privilege escalation to SYSTEM privileges
- 1.Verify that affected devices received Microsoft’s fix or later applicable updates
- CVEs
- CVE-2023-21768
- Vendors
- Microsoft
- Products
- Windows 11 22H2
- Organizations
- IBM
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-21768 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 | 65% |
From the original article
2 min read at cybersecuritynews.com
A public proof-of-concept exploit for CVE-2023-21768 shows how attackers with local access can gain SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. Researchers Valentina Palmiotti, known as chompie, and Ruben Boonen published the code. Their complete exploit targets vulnerable Windows 11 22H2 systems.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.