Skip to content
COOEY

EXPOSURES › CVE-2002-0367

CVE-2002-0367

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2002-0367 ↗
⌖ EXPLOITED IN THE WILD SHAME 78/100 exploited-in-wildunpatchedprivilege-escalation

A 2002 Windows privilege escalation flaw in smss.exe allowed local users to gain SYSTEM privileges without proper authentication.

This unpatched vulnerability was actively exploited in the wild, enabling attackers to escalate privileges from local to SYSTEM. DIB organizations must ensure legacy Windows systems are patched or isolated, as this flaw represents a long-standing, avoidable risk that could be leveraged for lateral movement or ransomware deployment.

Shame score — A known, unpatched privilege escalation flaw exploited in the wild for over two decades, reflecting severe negligence in patch management and system hardening.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized