Windows 11 10.0.22000 - Backup service Privilege Escalation

vendor:

Windows 11

by:

nu11secur1ty

7.5

CVSS

HIGH

Privilege Escalation

269

CWE

Product Name: Windows 11

Affected Version From: 10.0.22000

Affected Version To: 10.0.22000

Patch Exists: YES

Related CWE: CVE-2023-21752

CPE: o:microsoft:windows_11:10.0.22000

Metasploit: https://www.rapid7.com/db/vulnerabilities/msft-cve-2023-21752/

Other Scripts:

Platforms Tested: Windows

2023

Windows 11 10.0.22000 – Backup service Privilege Escalation

Windows 11 Pro build 10.0.22000 Build 22000 suffers from Backup service - Privilege Escalation vulnerability. An attacker who successfully exploited this vulnerability could gain SYSTEM privileges and could delete data that could include data that results in the service being unavailable.

Mitigation:

Apply the latest security updates from Microsoft to mitigate this vulnerability.

Source

Exploit-DB raw data:

## Title: Windows 11 10.0.22000 -  Backup service Privilege Escalation
## Author: nu11secur1ty
## Date: 01.13.2023
## Vendor: https://www.microsoft.com/
## Software: https://www.microsoft.com/en-us/software-download/windows11
## Reference: https://github.com/nu11secur1ty/CVE-mitre/tree/main/2023/CVE-2023-21752

## Description:
Windows 11 Pro build 10.0.22000 Build 22000 suffers from  Backup
service - Privilege Escalation vulnerability.
An attacker who successfully exploited this vulnerability could gain
SYSTEM privileges.
and could delete data that could include data that results in the
service being unavailable.


## STATUS: HIGH Vulnerability - CRITICAL

[+] Exploit:
[href](https://github.com/nu11secur1ty/CVE-mitre/tree/main/2023/CVE-2023-21752/PoC)

## Reference:
[href](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752)

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-mitre/tree/main/2023/CVE-2023-21752/PoC)

## Proof and Exploit:
[href](https://streamable.com/f2dl3m)



-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at https://packetstormsecurity.com/
https://cve.mitre.org/index.html https://0day.today/
https://cxsecurity.com/ and https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>