CVE-2017-0173 - Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This CVE ID is unique from CVE-2017-0215, CVE-2017-0216, CVE-2017-0218, and CVE-2017-0219

Back Back to CVE browser

MEDIUM

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This CVE ID is unique from CVE-2017-0215, CVE-2017-0216, CVE-2017-0218, and CVE-2017-0219

Published Jun 15, 2017

5.3

MEDIUM

CVSS 3.0

EPSS 1.45%

Description

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This CVE ID is unique from CVE-2017-0215, CVE-2017-0216, CVE-2017-0218, and CVE-2017-0219.

Affected products

Vendor Microsoft Corporation Product Microsoft Windows Default
n/a
- Version
  Microsoft Windows 10 1607 and Windows Server 2016.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft Corporation

Microsoft Windows

n/a

Version	Status	Constraints
Microsoft Windows 10 1607 and Windows Server 2016.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/bid/98873
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-0540
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0173
x_refsource_CONFIRMMitigationPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/98873		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-0540		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0173		x_refsource_CONFIRMMitigationPatchVendor Advisory