⚠ Actively exploited
Added to CISA KEV on 2022-09-15. Federal agencies required to patch by 2022-10-06. Required action: Apply updates per vendor instructions..
CVE-2010-2568 — Improper Input Validation in Microsoft Windows Server 2008
Severity
7.8HIGHNVD
EPSS
92.1%
top 0.29%
CISA KEV
KEV
Added 2022-09-15
Due 2022-10-06
Exploit
Exploited in wild
Active exploitation observed
Affected products
Timeline
PublishedJul 22
KEV addedSep 15
KEV dueOct 6
Latest updateJul 2
CISA Required Action: Apply updates per vendor instructions.
Description
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-q89m-g397-f55p: Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, a↗2022-05-17
GHSA▶
GHSA-6j7w-pxhr-g4pr: Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote atta↗2022-05-14