VulnerabilityModified
CVE-2017-11830
Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature…
MEDIUM 5.3EPSS 2.57%
Does this matter?
Lower severity and a low EPSS score (2.57%). Track it; it rarely justifies an emergency change on its own.
Description
Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability".
- CVSS 3.0
- 5.3 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- EPSS
- 2.57% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-367
- Affected
- microsoft/windows 10 · microsoft/windows server · microsoft/windows server 2016
- Source
- secure@microsoft.com
References
- http://www.securityfocus.com/bid/101714Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039790Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/43162/Exploit, Technical Description, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/101714Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039790Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/43162/Exploit, Technical Description, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.