Windows 10: Microsoft Windows Unquoted Service Path Enumeration vulnerability

Dear Team,How to overcome "Microsoft Windows Unquoted Service Path Enumeration vulnerability".VA in this path: C:\Windows\Microsoft.NET\Framework64\v3.0\ Windows Communication Foundation\SMSvcHost.exe.Please suggest.

:)

 

Vulnerability Assessments – Detailed Report

Kindly help to share the step to remediate this findings on our windows 10.

1. Microsoft Windows Unquoted Service Path Enumeration -

#Ensure that any services that contain a space in the path enclose the path in quotes. NWSAPAutoWorkstationUpdateSvc : C:\Program Files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe

2. SSL Certificate Signed Using Weak Hashing Algorithm.

#Contact the Certificate Authority to have the SSL certificate reissued.

3. SSL Medium Strength Cipher Suites Supported (SWEET32)

#Reconfigure the affected application if possible to avoid use of medium strength ciphers.

4. SMB Signing not required

#Enforce message signing in the host's configuration. On Windows, this is found in the policy setting 'Microsoft network server: Digitally sign communications (always)'.

 

How to Escilate Trustedinstaller privileges

hello dave

Yes, I understand That Trustedinstaller Has the highest privileges but are there ways to use a vulnerability like:

"Insecure Service Properties

• Unquoted Service Paths
  
• Weak Registry Permissions
  
• Insecure Service Executables"
  
  In Windows Or A tool To Escalate Trustedinstaller privileges ?
  

 

WPA2 Vulnerability Found

A small update with regards to the Microsoft fix. The fix itself is sufficient to solve the issue on Windows, even if your WiFi device has no driver update, with one caveat:

Does this security update fully address these vulnerabilities on Microsoft Platforms, or do I need to perform any additional steps to be fully protected?
The provided security updates address the reported vulnerabilities; however, when affected Windows based systems enter a connected standby mode in low power situations, the vulnerable functionality may be offloaded to installed Wi-Fi hardware. To fully address potential vulnerabilities, you are also encouraged to contact your Wi-Fi hardware vendor to obtain updated device drivers. For a listing of affected vendors with links to their documentation, review the ICASI Multi-Vendor Vulnerability Disclosure statement here: ICASI integrates into FIRST PSIRT SIG bolstering the incident response and security team industry

Source: Security Update Guide - Microsoft Security Response Center