Microsoft Windows Admin Center Privilege Escalation Vulnerability

A vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network. This issue arises from missing authorization, enabling low-privileged attackers to perform actions that should require higher-level permissions. Exploitation could disrupt normal operations by overwriting or altering the existing installation of Windows Admin Center.

Impact

Successful exploitation allows low-privileged attackers to perform unauthorized actions that affect the system's integrity and availability. Attackers could install any available version of Windows Admin Center from the update catalog, including versions with known vulnerabilities, thereby disrupting normal operations.

Remediation

Users are advised to download the security update for Windows Admin Center. Instructions are available in the Windows Admin Center release notes.