Last Modified Date
7/21/2021 7:32 PMDescription
Checks the ACL for the SAM, SYSTEM, and SECURITY files for the READ attribute. This is an indicator of misconfigured permissions and should be addressed.Â
Common vulnerability associated with these misconfigured permissions is CVE-2021-36934 but it is not exclusive to this vulnerability only. Â
Type
Custom Service / Script Check
Category
Windows Configuration
Target OS
Windows 10;Windows Server 2016;Windows Server 2019
Compatible with N-central
N-central minimum version
Compatible with RMM
Syntax
Output
Will contain "Vulnerable" if SAM, SECURITY or SYSTEM have READ access
Download Link
https://files.n-able.com/NRCNable/media/Cookbook/Monitor+for+ACL+READ+SAM_SECURITY_SYSTEM_NC.amp
Keywords
hivenightmare cve-2021-36934 hive registry permission