Microsoft Cortana Vulnerability  - aaCUo1528954682 - Microsoft Cortana Vulnerability Allows to Break Locked Windows 10 PC

Cortana that patched by Microsoft allows attackers to execute malicious code on the locked computer and gain access to the locked device without any user interaction.

Cortana is a virtual personal assistant that handles a number of tasks, it can get at reminders, telling jokes and to answer question Cortana uses Bing search engine.

The vulnerability was patched with the recently released Microsoft Tuesday patch that covers more than 50 Critical Vulnerabilities.

McAfee Security researcher Cedric Cochin identified the Cortana Elevation of Privilege Vulnerability and it was tracked as CVE-2018-8140.

Cochin says the problem is with Cortana default settings respond to any voice calling “Hey Cortana” from the lock screen which can be abused by the attackers to interact with the operating even if the computer is locked.

By saying “Hey Cortana” users can bring a contextual menu on the locked device login screen, where users can type to search for files present in the system and the Cortana brings the results from indexed files and applications.

- 20180612 CVE 8140 2 - Microsoft Cortana Vulnerability Allows to Break Locked Windows 10 PC

If you have the filename matching it shows the file location and if the content matches it presents the content itself.

- 20180612 CVE 8140 3 - Microsoft Cortana Vulnerability Allows to Break Locked Windows 10 PC

Attackers can use these methods to execute dropped payload on the system as an administrator by just right-click on the file and “Run as administrator“.

- 20180612 CVE 8140 5 - Microsoft Cortana Vulnerability Allows to Break Locked Windows 10 PC

used simple PowerShell command to execute the code that presents in the USB drive to bypass the policy and to reset the password to log in with the machine.

- 20180612 CVE 8140 11 - Microsoft Cortana Vulnerability Allows to Break Locked Windows 10 PC

- 20180612 CVE 8140 12 - Microsoft Cortana Vulnerability Allows to Break Locked Windows 10 PC

To mitigate the users need to turn off Cortana on the lock screen and this issue has been resolved with the recently released Microsoft Tuesday security updates.

Also Read:

macOS Signature Validation Flaw Allows a Malicious Code Appeared to be Signed by Apple

VMware Released Security Updates for Critical Remote Code Execution Vulnerability

Malicious Chrome Extension Launch MitM Attack to Harvest User Logins & Passwords and Steal Money



Source link

LEAVE A REPLY

Please enter your comment!
Please enter your name here