MS.IIS.Cpshost.DLL.Access

Description

This indicates a file upload vulnerability in Microsoft Internet Information Server (IIS).

Some versions of IIS include the file that allows remote users to upload content to the web server. These uploads can include scripts or executables that could allow an attacker to execute hostile content.

Affected Products

Any unprotected IIS that includes cpshost.dll is vulnerable to the attack.

Impact

Attackers can upload and execute potentially malicious files on victim system.

Recommended Actions

Remove the cpshost.dll if it is not used.

Block the remote access to the cpshost.dll file.