Picus Security Adds Simulation Support for Critical CVE-2021-31166 Vulnerability

Picus Security has expanded its threat simulation platform to include testing scenarios for CVE-2021-31166, a critical vulnerability affecting the Windows HTTP Protocol Stack (HTTP.sys). The flaw allows unauthenticated attackers to execute remote code on vulnerable servers, potentially leading to full system compromise.

The vulnerability is categorized as 'wormable,' posing a significant risk for rapid lateral movement across networks. Because HTTP.sys serves as a core component for Microsoft Internet Information Services (IIS), Windows Remote Management, and other services, the flaw impacts a wide array of Windows 10 and Windows Server deployments.

Picus Security’s updated simulations are designed to map against MITRE ATT&CK techniques, allowing security teams to measure the efficacy of their detection and prevention controls. By testing these scenarios, organizations can verify if their intrusion detection systems, web application firewalls, and endpoint protection are correctly configured to block exploitation attempts.