attack.Exploitation for Privilege Escalation | Detection.FYI

Exploitation of 7zip vulnerability - CVE-2022-29072

Aug 10, 2024 · attack.Exploitation for Privilege Escalation attack.T1068 ·
Share on:

Detects possible exploitation vulnerability CVE-2022-29072. This vulnerability is due to 7z.dll misconfiguration. When a .7z file is placed in the Help > Contents area of the current Windows version 21.07, anyone with access to the host can elevate privileges. The command creates a child process of 7zFM.exe.

Read More