This vulnerability can let attackers gain admin rights on vulnerable systems and execute arbitrary code with SYSTEM privileges. Affected Systems are all OS released since October 2018, starting with Windows 10 1809 and Windows Server 2019.
Restrict access to the contents of %windir%\system32\config:
- Open Command Prompt or PowerShell as an administrator.
- Run this command:
- Command Prompt: icacls %windir%\system32\config\*.* /inheritance:e
- Windows PowerShell: icacls $env:windir\system32\config\*.* /inheritance:en
And deleting Volume Shadow Copies!
