Security News > 2017 > March > Fileless UAC Bypass Uses Windows Backup and Restore Utility (Threatpost)

Fileless UAC Bypass Uses Windows Backup and Restore Utility (Threatpost)

2017-03-27 16:13

Researcher Matt Nelson disclosed another Windows UAC bypass, this one abusing the sdclt.exe backup and restore utility to execute a payload without triggering an alert.

News URL

http://threatpost.com/fileless-uac-bypass-uses-windows-backup-and-restore-utility/124579/

#backup #bypass #threatpost #windows

Related news

Veeam warns of critical Backup Enterprise Manager auth bypass bug (source)
Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass (source)
Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849) (source)

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.