CVE-2021-31166

---

Description

• POC for CVE-2021-31166: Windows HTTP协议栈远程代码执行漏洞
• create by antx at 2021-09-27.

---

Detail

• Poc-Gif

Affect

• Windows Server, version 2004 (or 20H1) (Server Core installation),
• Windows 10 Version 2004 (or 20H1) for ARM64/x64/32-bit Systems,
• Windows Server, version 20H2 (Server Core Installation),
• Windows 10 Version 20H2 for ARM64/x64/32-bit Systems.
• Windows Remote Management (WinRM)
• Web Services on Devices (WSDAPI)
• Lack of KB4598481 KB5003173 KB5000736 windows system patch or the system iso is before 2021-05.

---

Reference

• Ref-Source
  • 0vercl0k/CVE-2021-31166
• Ref-Article
  • CVE-2021-31166 Windows HTTP协议栈远程代码执行漏洞复现
• Ref-Risk
  • HTTP Protocol Stack Remote Code Execution Vulnerability
  • NVD<CVE-2021-31166>