Forum Discussion

GKrembsler's avatar
GKrembsler
Copper Contributor
Jan 13, 2023

CVE 2022 41099

Hi, As a CISO and security consultant, I want to know the extent of the impact of this vulnerability. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099 My current understanding ...
microsoft defender for endpoint
security
Internetguy441's avatar
Internetguy441
Copper Contributor
Jan 24, 2023

Bitlocker is not secure no matter the vulnerability btw. It can easily be decrypted with a small memdump or memory capture. There are tools to just boot that stuff up and decrypt.

 

So if your concern is encryption, then bitlocker is an issue.

  • MikeP751860's avatar
    MikeP751860
    Brass Contributor
    Mar 20, 2023
    Most of my estate does not have WinRE but I have detected a small number. Anyone know how I could deploy a vulnerable WinRE to a test client? To allow us to test the PowerShell script ahead of a limited production deployment?

Resources