CVEvulnerability
CVE-2017-0007
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associated signatures, aka "PowerShell Security Feature Bypass Vulnerability."
Affected configurations
• microsoft windows 10
• microsoft windows 10 1511
• microsoft windows 10 1607
• microsoft windows server 2016
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/96018 www.securityfocus.com
- http://www.securitytracker.com/id/1038001 www.securitytracker.com
- https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/ enigma0x3.net
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0007 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/96018 www.securityfocus.com
- http://www.securitytracker.com/id/1038001 www.securitytracker.com
- https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/ enigma0x3.net
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0007 Patch, Vendor Advisory