CVE-2023-23397 PoC — Microsoft Outlook Elevation of Privilege Vulnerability

Source

Associated Vulnerability

Description

CVE-2023-23397 Remediation Script (Powershell)

Readme

# CVE-2023-23397
CVE-2023-23397 Remediation Script (Powershell)

There are 3 PowerShell scripts.

If your patch management software uses an **evaluation** and a **remediation script**, use the respective files/scripts.

Alternatively, if you wish to just push out the update without the above, the **All In One script** will evaluate the current version of Microsoft Office and if it is not one of the versions listed in the script, it will force an Office update.

The all in one script can be run manually or pushed out directly to the endpoint.

**Note that the All In One Scripts and Remediation scripts will force an update without notfying the user. They will force close Office in order to update; adjust as desired.**

Endpoints with Office Versions listed in the script (up-to-date as of 3/17/23) will not have to go through the update process or have Office force closed.

File Snapshot

 [4.0K]  /data/pocs/83c410f3a5c460873be99133cb9cd8ff94f72eb7
├── [ 34K]  LICENSE
├── [4.0K]  Patches
│   ├── [1009]  AllInOnePatcher.ps1
│   ├── [ 608]  EvaluationScript.ps1
│   └── [ 218]  RemediationScript.ps1
└── [ 882]  README.md

1 directory, 5 files

Remarks