exploit/windows/local/comahawk

weaponized

Microsoft UPnP Local Privilege Elevation Vulnerability

view exploit source metasploittype exploitpublished 2019-11-12catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-1405US	high7.8OT critical	30.2% (98th)	KEV	2019-11-12
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of…
CVE-2019-1322US	high7.8OT critical	18.8% (97th)	KEV	2019-10-10
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.