Skip to content
Threat Feed

Product

ECS Agent for Windows

1 brief RSS
high advisory

Amazon ECS Agent for Windows Vulnerable to Command Injection

Amazon ECS Agent for Windows versions 1.47.0 through 1.102.2 are vulnerable to command injection via specially crafted credentials in the FSx Windows File Server volume mounting process, potentially allowing a remote authenticated attacker to execute shell commands with SYSTEM privileges.

ECS Agent for Windows command injection privilege escalation cloud
2r 1t