Lucene search

K
mscveMicrosoftMS:CVE-2023-28240
HistoryApr 11, 2023 - 7:00 a.m.

Windows Network Load Balancing Remote Code Execution Vulnerability

2023-04-1107:00:00
Microsoft
msrc.microsoft.com
13
microsoft
windows
network load balancing
vulnerability
remote code execution

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

49.2%

Affected configurations

Vulners
Node
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server_2012Range<6.2.9200.24216
OR
microsoftwindows_server_2012Range<6.2.9200.24216
OR
microsoftwindows_server_2012Range<6.2.9200.24216
OR
microsoftwindows_server_2012Range<6.2.9200.24216
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22015sp2
OR
microsoftwindows_server_2016Range<10.0.14393.5850
OR
microsoftwindows_server_2016Range<10.0.14393.5850
OR
microsoftwindows_server_2022Range<10.0.20348.1668
OR
microsoftwindows_server_2022Range<10.0.20348.1668
OR
microsoftwindows_server_2019Range<10.0.17763.4252
OR
microsoftwindows_server_2019Range<10.0.17763.4252
VendorProductVersionCPE
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:r2:*:*:*:*:*:*
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

49.2%