HTTP: Microsoft Windows Desktop Bridge CVE-2018-0882 Elevation of Privileges

This signature detects attempts to exploit a known vulnerability against Microsoft Windows Desktop Bridge. A successful attack can lead to elevation of privileges.

Extended Description

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0880.

Affected Products

Microsoft windows_server_2016

References

CVE: CVE-2018-0882

Short Name
HTTP:STC:DL:CVE-2018-0882-PE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Bridge CVE-2018-0882 Desktop Elevation Microsoft Privileges Windows of
Release Date
03/13/2018
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

6.9

Found a potential security threat?