Write a script that can detect a CVE
publish by @bcena
31 Mar 2025
#x_detection
CVE-2021-34527 - PrintNightmare - Detection Script
by @bcena
31 Mar 2025
#x_detection
Write a script that can detect a CVE
publishCVE-2021-34527 - PrintNightmare - Detection Script
OS
Windows Server 2019Microsoft
10.0.17763.3772.*
10.0.17763.5579.*
10.0.17763.8389.*
10.0.17763.8755.*
10.0.17763.7683.*
10.0.17763.7240.*
10.0.17763.8281.*
10.0.17763.8647.*
10.0.17763.7249.*
10.0.17763.7322.*
Windows Server 2016Microsoft
10.0.14393.9140.*
10.0.14393.9062.*
10.0.14393.9060.*
10.0.14393.8957.*
10.0.14393.8868.*
10.0.14393.8688.*
10.0.14393.8783.*
10.0.14393.8594.*
10.0.14393.8524.*
10.0.14393.8519.*
Windows Server 2012Microsoft
6.2.9200.25973.*
4117.*
7382.*
NT 6.2.*
7375.*
6.2.9200.25073.*
6.2.9200.24975.*
6.2.9200.25031.*
6.2.9200.24919.*
6.2.9200.24768.*
WR8
Windows RT 8.1Microsoft
6.3.9600.20520.*
*.*
*.*
*.*
-.*
-.*
-.*
Windows 7Microsoft
SP1.*
SP1.*
SP1.*
Gold.*
*.SP1
*.*
*.SP1
*.SP1
*.*
2010.*
Windows Server 2008Microsoft
Null.*
SP2.*
SP2.X64
SP2.X32
SP2.*
SP2.*
R2.SP1
R2.SP1
R2.SP1
R2.SP1
Windows 10Microsoft
30H2.*
25H2.*
AMD6.*
8662.*
1002.*
ARM6.*
1003.*
1004.*
2601.*
2478.*
Windows 8.1Microsoft
6.3.9600.20520.*
6.3.9600.20520.*
RT.*
*.*
*.*
*.*
*.*
-.*
-.*
-.*
WS2
Windows Server 20H2Microsoft
10.0.19042.982.*
10.0.19042.1415.*
10.0.19042.1237.*
10.0.19042.1348.*
10.0.19042.1165.*
10.0.19042.1889.*
10.0.19042.1766.*
10.0.19042.1706.*
10.0.19042.1526.*
10.0.19042.1288.*
W12
Windows 11 21H2Microsoft
10.0.22000.3019.*
10.0.22000.3147.*
10.0.22000.2777.*
10.0.22000.2777.*
10.0.22000.3260.*
10.0.22000.3260.*
10.0.22000.2710.*
10.0.22000.2899.*
10.0.22000.2899.*
22000.2899.*
W12
Windows 11 22H2Microsoft
10.0.22621.6060.*
10.0.22621.6060.*
10.0.22621.5909.*
10.0.22621.5909.*
10.0.22621.5900.*
10.0.22621.5900.*
10.0.22621.5768.*
10.0.22621.5768.*
10.0.22621.5624.*
10.0.22621.5624.*
W12
Windows 10 22H2Microsoft
10.0.19045.6937.*
10.0.19045.6937.*
10.0.19045.6937.*
10.0.19045.7058.*
10.0.19045.7058.*
10.0.19045.7058.*
10.0.19045.7291.*
10.0.19045.7291.*
10.0.19045.7291.*
10.0.19045.7184.*
W12
Windows 10 21H2Microsoft
10.0.19044.7291.*
10.0.19044.7291.*
10.0.19044.7291.*
10.0.19044.7184.*
10.0.19044.7184.*
10.0.19044.7184.*
10.0.19044.7058.*
10.0.19044.7058.*
10.0.19044.7058.*
10.0.19044.6937.*
W12
Windows 10 20H2Microsoft
10.0.19042.2788.*
10.0.19042.2788.*
10.0.19042.2788.*
10.0.19042.2673.*
10.0.19042.2673.*
10.0.19042.2673.*
10.0.19042.2546.*
10.0.19042.2546.*
10.0.19042.2546.*
10.0.19042.2364.*
W11
Windows 10 1607Microsoft
10.0.14393.9140.*
10.0.14393.9140.*
10.0.14393.9060.*
10.0.14393.9060.*
10.0.14393.8957.*
10.0.14393.8957.*
10.0.14393.8868.*
10.0.14393.8868.*
10.0.14393.8688.*
10.0.14393.8688.*
W11
Windows 10 1507Microsoft
10.0.10240.20680.*
10.0.10240.20680.*
10.0.10240.20469.*
10.0.10240.20469.*
10.0.10240.21161.*
10.0.10240.21161.*
10.0.10240.21128.*
10.0.10240.21128.*
10.0.10240.21122.*
10.0.10240.21122.*
W11
Windows 10 1809Microsoft
10.0.17763.8389.*
10.0.17763.8389.*
10.0.17763.8755.*
10.0.17763.8755.*
10.0.17763.8644.*
10.0.17763.8644.*
10.0.17763.8511.*
10.0.17763.8511.*
10.0.17763.8146.*
10.0.17763.8146.*
Windows Server 2022Microsoft
10.0.20348.3695.*
10.0.20348.3695.*
10.0.20348.3695.*
10.0.20348.4893.*
10.0.20348.4893.*
10.0.20348.4893.*
10.0.20348.4773.*
10.0.20348.4773.*
10.0.20348.4773.*
10.0.20348.4776.*
PoC video
xdetection
Description
Comments (0)