{"id":"CVE-2021-1636","published":"2021-01-12T19:41:55Z","modified":"2024-10-08T16:17:34Z","title":"Microsoft SQL Elevation of Privilege Vulnerability","vendor":"Microsoft","product":"Microsoft SQL Server 2012 Service Pack 4 (QFE)","tier":"core","eol":null,"affectedVersions":[{"vendor":"Microsoft","product":"Microsoft SQL Server 2012 Service Pack 4 (QFE)","versions":[">= 11.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)","versions":[">= 11.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2017 (GDR)","versions":[">= 14.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2014 Service Pack 3 (GDR)","versions":[">= 12.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)","versions":[">= 13.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2014 Service Pack 3 (CU 4)","versions":[">= 12.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2017 (CU 22)","versions":[">= 14.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2016 Service Pack 2 (CU 15)","versions":[">= 13.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2019 (CU 8)","versions":[">= 16.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft SQL Server 2019 (GDR)","versions":[">= 15.0.0, < publication"]}],"description":{"text":"Microsoft SQL Elevation of Privilege Vulnerability","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.06693,"percentile":0.93909,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2022-02-24","exploitedFirstSeen":"2022-02-24","ransomware":false,"evidence":[{"url":"https://www.security.com/threat-intelligence/ukraine-wiper-malware-russia","date":"2022-02-24"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1636","tags":["vendor-advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1636","tags":["x_refsource_MISC","x_transferred"]}],"techniques":[],"reports":[{"id":"SRC-8f855a9a215f30f8f6e4","title":"Ukraine: Disk-wiping Attacks Precede Russian Invasion","publisher":"security.com","url":"https://www.security.com/threat-intelligence/ukraine-wiper-malware-russia","date":null,"mentions":[{"quote":"UPDATE February 25, 2022, 17:00: This blog has been updated with details on how a known Microsoft SQL Server  vulnerability (CVE-2021-1636) was exploited in at least one attack.","start":385,"end":562},{"quote":"The attackers appear to have used an exploit of a known vulnerability in Microsoft SQL Server (CVE-2021-1636) in order to compromise at least one of the targeted organisations.","start":4296,"end":4472}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-7103","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-7103","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2022-03-04","earliestUrl":"https://github.com/Nate0634034090/bug-free-memory","repos":[{"name":"Nate0634034090/bug-free-memory","url":"https://github.com/Nate0634034090/bug-free-memory","stars":35,"created":"2022-03-04"}]},"first":{"date":"2022-03-04","source":"PoC-in-GitHub","url":"https://github.com/Nate0634034090/bug-free-memory"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-01-12","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-1636","provenance":"source"},{"date":"2022-02-24","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.security.com/threat-intelligence/ukraine-wiper-malware-russia","provenance":"source"},{"date":"2022-03-04","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/Nate0634034090/bug-free-memory","provenance":"source"}],"speed":{"daysToPublicExploit":416,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":68.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1711 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.78,"detail":"percentile 0.9391"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}