Lucene search

K
nvd[email protected]NVD:CVE-2023-21692
HistoryFeb 14, 2023 - 8:15 p.m.

CVE-2023-21692

2023-02-1420:15:12
CWE-122
web.nvd.nist.gov
5
microsoft
peap
remote code execution
vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.324

Percentile

97.1%

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

Affected configurations

Nvd
Node
microsoftwindows_10_1507Range<10.0.10240.19747x64
OR
microsoftwindows_10_1507Range<10.0.10240.19747x86
OR
microsoftwindows_10_1607Range<10.0.14393.5717x64
OR
microsoftwindows_10_1607Range<10.0.14393.5717x86
OR
microsoftwindows_10_1809Range<10.0.17763.4010arm64
OR
microsoftwindows_10_1809Range<10.0.17763.4010x64
OR
microsoftwindows_10_1809Range<10.0.17763.4010x86
OR
microsoftwindows_10_20h2Range<10.0.19042.2604arm64
OR
microsoftwindows_10_20h2Range<10.0.19042.2604x64
OR
microsoftwindows_10_20h2Range<10.0.19042.2604x86
OR
microsoftwindows_10_21h2Range<10.0.19044.2604arm64
OR
microsoftwindows_10_21h2Range<10.0.19044.2604x64
OR
microsoftwindows_10_21h2Range<10.0.19044.2604x86
OR
microsoftwindows_10_22h2Range<10.0.19045.2604arm64
OR
microsoftwindows_10_22h2Range<10.0.19045.2604x64
OR
microsoftwindows_10_22h2Range<10.0.19045.2604x86
OR
microsoftwindows_11_21h2Range<10.0.22000.1574arm64
OR
microsoftwindows_11_21h2Range<10.0.22000.1574x64
OR
microsoftwindows_11_22h2Range<10.0.22621.1265arm64
OR
microsoftwindows_11_22h2Range<10.0.22621.1265x64
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2019Match-
OR
microsoftwindows_server_2022Match-

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.324

Percentile

97.1%