Exposures › CVE-2002-0367

CVE-2002-0367

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2002-0367

⌖ exploited in the wild shame 50/100 exploited-in-wild

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

Players implicated

Microsoft · vendor windows · product

Description

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

Affected FedRAMP products 4 in the catalog

Product	Provider	Status	Match
Azure Commercial Cloud	Microsoft	Authorized	vendor-exact · 0.90
Azure Government (includes Dynamics 365)	Microsoft	Authorized	vendor-exact · 0.90
Microsoft Office 365 GCC High	Microsoft	In Process	vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services	Microsoft	Authorized	vendor-exact · 0.90