Microsoft Configuration Manager Elevation of Privilege Vulnerability

A vulnerability allowing improper access control in Microsoft Configuration Manager has been identified. This issue enables an authorized attacker to elevate privileges over a network. The vulnerability exists in Microsoft Configuration Manager versions 2503, 2603, and 2509.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to gain SYSTEM privileges on the affected system.

Remediation

Users can download the security update for Microsoft Configuration Manager 2503, 2603, or 2509 via the Microsoft Endpoint Configuration Manager console. For detailed guidance, refer to the Microsoft Knowledge Base articles KB38232642 for versions 2603 and 2503, and KB37864969 for version 2509.