Microsoft Windows Unquoted Service Path Enumeration vulnerability

Question

Dear Team,

How to overcome "Microsoft Windows Unquoted Service Path Enumeration vulnerability".

VA in this path: C:\Windows\Microsoft.NET\Framework64\v3.0\ Windows Communication Foundation\SMSvcHost.exe.

Please suggest.

Answer 1

https://github.com/NetSecJedi/FixUnquotedPaths

This works and is scalable with SCCM, InTune, GPO.

Look at the script yourself and decide.

Answer 2

Hello there,

Apparently there still seems to be a lot of applications with this vulnerability out there but not necessarily mean that falls under Microsoft.

Similar discussion here

https://techcommunity.microsoft.com/t5/windows-security/windows-unquoted-service-path-enumeration-is-this-still-a-case/m-p/3298358

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--