Write a script that can detect a CVE
publish by @bcena
03 Apr 2025
#x_detection
CVE-2024-38202 - Potential Elevation of Privilege Vulnerability in Windows Backup - Detection Script
by @bcena
03 Apr 2025
#x_detection
Write a script that can detect a CVE
publishCVE-2024-38202 - Potential Elevation of Privilege Vulnerability in Windows Backup - Detection Script
OS
Windows Server 2019Microsoft
10.0.17763.3772.*
10.0.17763.5579.*
10.0.17763.8389.*
10.0.17763.8755.*
10.0.17763.7683.*
10.0.17763.7240.*
10.0.17763.8281.*
10.0.17763.8647.*
10.0.17763.7249.*
10.0.17763.7322.*
Windows Server 2016Microsoft
10.0.14393.9140.*
10.0.14393.9062.*
10.0.14393.9060.*
10.0.14393.8957.*
10.0.14393.8868.*
10.0.14393.8688.*
10.0.14393.8783.*
10.0.14393.8594.*
10.0.14393.8524.*
10.0.14393.8519.*
WS2
Windows Server 2022 23H2Microsoft
10.0.25398.2330.*
10.0.25398.2207.*
10.0.25398.2149.*
10.0.25398.2149.*
10.0.25398.2274.*
10.0.25398.2025.*
10.0.25398.2092.*
10.0.25398.1965.*
10.0.25398.1913.*
10.0.25398.1916.*
W12
Windows 11 23H2Microsoft
10.0.22631.6649.*
10.0.22631.6649.*
10.0.22631.6783.*
10.0.22631.6783.*
10.0.22631.7079.*
10.0.22631.7079.*
10.0.22631.6936.*
10.0.22631.6936.*
10.0.22631.6345.*
10.0.22631.6345.*
W12
Windows 11 21H2Microsoft
10.0.22000.3019.*
10.0.22000.3147.*
10.0.22000.2777.*
10.0.22000.2777.*
10.0.22000.3260.*
10.0.22000.3260.*
10.0.22000.2710.*
10.0.22000.2899.*
10.0.22000.2899.*
22000.2899.*
W12
Windows 11 22H2Microsoft
10.0.22621.6060.*
10.0.22621.6060.*
10.0.22621.5909.*
10.0.22621.5909.*
10.0.22621.5900.*
10.0.22621.5900.*
10.0.22621.5768.*
10.0.22621.5768.*
10.0.22621.5624.*
10.0.22621.5624.*
W12
Windows 10 22H2Microsoft
10.0.19045.6937.*
10.0.19045.6937.*
10.0.19045.6937.*
10.0.19045.7058.*
10.0.19045.7058.*
10.0.19045.7058.*
10.0.19045.7291.*
10.0.19045.7291.*
10.0.19045.7291.*
10.0.19045.7184.*
W12
Windows 10 21H2Microsoft
10.0.19044.7291.*
10.0.19044.7291.*
10.0.19044.7291.*
10.0.19044.7184.*
10.0.19044.7184.*
10.0.19044.7184.*
10.0.19044.7058.*
10.0.19044.7058.*
10.0.19044.7058.*
10.0.19044.6937.*
W11
Windows 10 1607Microsoft
10.0.14393.9140.*
10.0.14393.9140.*
10.0.14393.9060.*
10.0.14393.9060.*
10.0.14393.8957.*
10.0.14393.8957.*
10.0.14393.8868.*
10.0.14393.8868.*
10.0.14393.8688.*
10.0.14393.8688.*
W11
Windows 10 1809Microsoft
10.0.17763.8389.*
10.0.17763.8389.*
10.0.17763.8755.*
10.0.17763.8755.*
10.0.17763.8644.*
10.0.17763.8644.*
10.0.17763.8511.*
10.0.17763.8511.*
10.0.17763.8146.*
10.0.17763.8146.*
Windows Server 2022Microsoft
10.0.20348.3695.*
10.0.20348.3695.*
10.0.20348.3695.*
10.0.20348.4893.*
10.0.20348.4893.*
10.0.20348.4893.*
10.0.20348.4773.*
10.0.20348.4773.*
10.0.20348.4773.*
10.0.20348.4776.*
PoC video
xdetection
Description
Comments (0)