CVE-2022-41099 PoC — Microsoft Windows BitLocker 安全漏洞

Description

Update WINRE.WIM file to fix CVE-2022-41099

介绍

 I take no Liability & Warranty on this script please fully test before use.

# CVE-2022-41099-Fix
Update WINRE.WIM file to fix CVE-2022-41099


REF: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099
Microsoft Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=kb5022282

You will need to create your own WINRE.wim file.
Tested with Intune, create intuneapp with the following files: -
- CVE-2022-41099.ps1
- winre.wim (your need to create this)

Upload and put in extra detection for each version of windows your running

For requirements use registry: -
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
- UBR
- String comparison 
- Equals
- 2486

For Detection use the detection script: -
- Use a custom detection script
- Upload script "DetectionScript.ps1"
     

文件快照

备注