CVE Catalog

CVE-2017-8565

High
Published: Translated: NVD NIST

Summary

PowerShell in Windows has a vulnerability allowing remote code execution when PSObject wraps a CIM Instance. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.

Risk Assessment

An attacker could exploit this vulnerability to execute remote code on vulnerable systems, potentially leading to system takeover.

Recommendation

It is recommended to update systems to the latest versions that include security patches addressing this vulnerability.

Other vulnerabilities in Windows PowerShell

Original NVD description (English source)

Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka "Windows PowerShell Remote Code Execution Vulnerability".

Vulnerability data from NVD (NIST) · CISA KEV · EPSS