Write a script that can detect a CVE
publish by @oruga
09 Apr 2025
#x_detection
CVE-2025-29824 - Windows Common Log File System Driver Elevation of Privilege Vulnerability - Detection Script
by @oruga
09 Apr 2025
#x_detection
Write a script that can detect a CVE
publishCVE-2025-29824 - Windows Common Log File System Driver Elevation of Privilege Vulnerability - Detection Script
OS
Windows Server 2019Microsoft
10.0.17763.8027.*
10.0.17763.7922.*
10.0.17763.7919.*
10.0.17763.7792.*
10.0.17763.7783.*
10.0.17763.7678.*
10.0.17763.7558.*
10.0.17763.7136.*
10.0.17763.7434.*
10.0.17763.7314.*
Windows Server 2016Microsoft
10.0.14393.8594.*
10.0.14393.8524.*
10.0.14393.8519.*
10.0.14393.8519.*
10.0.14393.8422.*
10.0.14393.8416.*
10.0.14393.8330.*
10.0.14393.8246.*
10.0.14393.8066.*
10.0.14393.8148.*
Windows Server 2012Microsoft
7382.*
7375.*
6.2.9200.25073.*
6.2.9200.24975.*
6.2.9200.25031.*
6.2.9200.24919.*
6.2.9200.24768.*
6.2.9200.24116.*
4113.*
Null.*
Windows Server 2008Microsoft
Null.*
SP2.*
SP2.X64
SP2.X32
SP2.*
SP2.*
R2.SP1
R2.SP1
R2.SP1
R2.SP1
WS2
Windows Server 2025Microsoft
10.0.26100.7171.*
10.0.26100.7092.*
10.0.26100.6905.*
10.0.26100.6899.*
10.0.26100.4656.*
10.0.26100.3781.*
10.0.26100.4066.*
10.0.26100.6508.*
10.0.26100.6584.*
10.0.26100.6563.*
W12
Windows 11 24H2Microsoft
10.0.26100.7171.*
10.0.26100.7092.*
10.0.26100.6899.*
10.0.26100.6899.*
10.0.26100.6508.*
10.0.26100.6508.*
10.0.26100.6584.*
10.0.26100.6584.*
10.0.26100.6563.*
10.0.26100.6563.*
WS2
Windows Server 2022 23H2Microsoft
10.0.25398.1965.*
10.0.25398.1913.*
10.0.25398.1916.*
10.0.25398.1849.*
10.0.25398.1840.*
10.0.25398.1791.*
10.0.25398.1791.*
10.0.25398.1791.*
10.0.25398.1369.*
10.0.25398.1425.*
W12
Windows 11 23H2Microsoft
10.0.22631.6199.*
10.0.22631.6199.*
10.0.22631.6060.*
10.0.22631.6060.*
10.0.22631.5909.*
10.0.22631.5909.*
10.0.22631.5900.*
10.0.22631.5900.*
10.0.22631.5768.*
10.0.22631.5768.*
W12
Windows 11 22H2Microsoft
10.0.22621.6060.*
10.0.22621.6060.*
10.0.22621.5909.*
10.0.22621.5909.*
10.0.22621.5900.*
10.0.22621.5900.*
10.0.22621.5768.*
10.0.22621.5768.*
10.0.22621.5624.*
10.0.22621.5624.*
W12
Windows 10 22H2Microsoft
10.0.19045.6575.*
10.0.19045.6575.*
10.0.19045.6575.*
10.0.19045.6456.*
10.0.19045.6456.*
10.0.19045.6456.*
10.0.19045.6332.*
10.0.19045.6332.*
10.0.19045.6332.*
10.0.19045.6321.*
W12
Windows 10 21H2Microsoft
10.0.19044.6575.*
10.0.19044.6575.*
10.0.19044.6575.*
10.0.19044.6456.*
10.0.19044.6456.*
10.0.19044.6456.*
10.0.19044.6218.*
10.0.19044.6218.*
10.0.19044.6218.*
10.0.19044.6332.*
W11
Windows 10 1607Microsoft
10.0.14393.8594.*
10.0.14393.8594.*
10.0.14393.8519.*
10.0.14393.8519.*
10.0.14393.8422.*
10.0.14393.8422.*
10.0.14393.8416.*
10.0.14393.8416.*
10.0.14393.8330.*
10.0.14393.8330.*
W11
Windows 10 1507Microsoft
10.0.10240.20680.*
10.0.10240.20680.*
10.0.10240.20469.*
10.0.10240.20469.*
10.0.10240.21161.*
10.0.10240.21161.*
10.0.10240.21128.*
10.0.10240.21128.*
10.0.10240.21122.*
10.0.10240.21122.*
W11
Windows 10 1809Microsoft
10.0.17763.8027.*
10.0.17763.8027.*
10.0.17763.7919.*
10.0.17763.7919.*
10.0.17763.7792.*
10.0.17763.7792.*
10.0.17763.7783.*
10.0.17763.7783.*
10.0.17763.7678.*
10.0.17763.7678.*
Windows Server 2022Microsoft
10.0.20348.4405.*
10.0.20348.4405.*
10.0.20348.4405.*
10.0.20348.4346.*
10.0.20348.4346.*
10.0.20348.4346.*
10.0.20348.4297.*
10.0.20348.3207.*
10.0.20348.3207.*
10.0.20348.3207.*
PoC video
xdetection
Description
Tags
@oruga
172 posts
Total vcoins
5K
Comments (0)