Microsoft Windows EFSRPC Arbitrary File Upload / Privilege Escalation

The EFSRPC service on Microsoft Windows Server versions 2019 and 2022 does not prevent a caller specifying a local device path allowing any authenticated user to upload arbitrary files to a server.

advisories | CVE-2021-43893