Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions.
http://www.securityfocus.com/bid/101213
http://www.securitytracker.com/id/1039526
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11829
Source: MITRE
Published: 2017-10-13
Updated: 2019-10-03
Type: CWE-552
Base Score: 2.1
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Impact Score: 2.9
Exploitability Score: 3.9
Severity: LOW
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
OR
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
ID | Name | Product | Family | Severity |
---|---|---|---|---|
103749 | KB4041691: Windows 10 Version 1607 and Windows Server 2016 October 2017 Cumulative Update (KRACK) | Nessus | Windows : Microsoft Bulletins | critical |
103745 | KB4041676: Windows 10 Version 1703 October 2017 Cumulative Update (KRACK) | Nessus | Windows : Microsoft Bulletins | critical |