Microsoft Windows SCM Remote Access Check Limit Bypass Privilege Escalation

The access limit check for non-local admins when accessing the SCM remotely can be bypassed by requesting MAXIMUM_ALLOWED, leading to gaining access to start services etc.

Leave a Reply