關(guān)于PowerShell遠(yuǎn)程代碼執(zhí)行漏洞（CVE-2022-41076）的預(yù)警提示

2023-01-13

一、漏洞詳情

PowerShell是一種功能強(qiáng)大的腳本語(yǔ)言和shell程序框架，PowerShell可在Windows、Linux和macOS上運(yùn)行。

近日監(jiān)測(cè)到針對(duì)PowerShell遠(yuǎn)程代碼執(zhí)行漏洞(CVE-2022-41076)的技術(shù)細(xì)節(jié)（稱(chēng)為T(mén)abShell）在互聯(lián)網(wǎng)上公開(kāi)。經(jīng)過(guò)身份驗(yàn)證的遠(yuǎn)程攻擊者可以在remote powershell會(huì)話(huà)中使用TabExpansion cmdlet，結(jié)合目錄穿越載入任意dll，導(dǎo)致攻擊者可以執(zhí)行原本不能執(zhí)行的cmdlet，從而在目標(biāo)機(jī)器上執(zhí)行任意代碼。

建議受影響用戶(hù)做好資產(chǎn)自查以及預(yù)防工作，以免遭受黑客攻擊。

二、影響范圍

Windows Server 2012 R2 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 (Server Core installation)

Windows Server 2012

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows RT 8.1

Windows 8.1 for x64-based systems

Windows 8.1 for 32-bit systems

Windows 7 for x64-based Systems Service Pack 1

Windows 7 for 32-bit Systems Service Pack 1

Windows Server 2016 (Server Core installation)

Windows Server 2016

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 for 32-bit Systems

Windows 10 Version 22H2 f

时时博在线娱乐城-百家乐代理 -禁毒法规定娱乐场所应当建立什么制度?

關(guān)于PowerShell遠(yuǎn)程代碼執(zhí)行漏洞（CVE-2022-41076）的預(yù)警提示

聯(lián)系我們