SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-1999-0534

Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote…

MEDIUM 4.6EPSS 1.49%

Does this matter?

Lower severity and a low EPSS score (1.49%). Track it; it rarely justifies an emergency change on its own.

Description

A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.

CVSS 2.0
4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS
1.49% probability · 73th percentile
CISA KEV
Not listed
Affected
microsoft/windows 2000 · microsoft/windows nt
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.