CVE-2004-2730: Microsoft Psexec

Medium severity, CVSS 4.6. EPSS: 1.5% chance of exploitation in the next 30 days.

Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.

Affected products

• Microsoft Psexec: up to and including 1.53
• Microsoft Psgetsid: up to and including 1.40
• Microsoft Psinfo: up to and including 1.60
• Microsoft Pskill: up to and including 1.02
• Microsoft Pslist: up to and including 1.25
• Microsoft Psloglist: up to and including 2.50
• Microsoft Pspasswd: up to and including 1.20
• Microsoft Psservice: up to and including 2.11
• Microsoft Psshutdown: up to and including 2.31
• Microsoft Pssuspend: up to and including 1.04
• Microsoft Sysinternals Pstools: up to and including 2.04

Published 2004-12-31. Last modified 2026-06-16.