Skip to content
COOEY

EXPOSURES › CVE-2017-0101

CVE-2017-0101

CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-15 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-0101 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 ransomwareexploited-in-wildunpatchedprivilege-escalation

A Microsoft Windows flaw allowed privilege escalation, actively exploited and linked to ransomware attacks, impacting DIB systems relying on Windows infrastructure.

CVE-2017-0101, a Windows Transaction Manager vulnerability, enabled privilege escalation due to improper memory handling. This is a significant concern for DIB organizations as it can lead to unauthorized access and data compromise, potentially impacting CMMC compliance. Ensure all Windows systems are patched and regularly scanned for vulnerabilities.

Shame score — The vulnerability's active exploitation and ransomware linkage demonstrate a serious, avoidable security lapse in a core operating system component.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized