Intrusion PreventionMS.Windows.Group.Policy.Preferences.Privilege.Escalation
Description
This indicates an attack attempt to exploit an Elevation Of Privilege Vulnerability in Microsoft Windows.
The vulnerability is due to an error in the vulnerable application when passwords are configured using Group Policy preferences. A remote authenticated attacker may be able to exploit this to leverage their privileges on vulnerable systems.
Affected Products
Windows Vista SP2
Windows Server 2008 SP2 and R2 SP1
Windows 7 SP1
Windows 8
Windows 8.1
Windows Server 2012 Gold and R2
Impact
Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-025
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 42204 |
| Created | Dec 21, 2020 |
| Updated | Jul 13, 2021 |
| Risk |
|
| CVE ID | CVE-2014-1812 |
| Known Exploited | Yes |
| Exploit Prediction Score | 0.37% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |