Lucene search
HistoryMar 14, 2023 - 5:15 p.m.
CVE-2023-23405
remote procedure call
runtime
remote code execution
vulnerability
cve-2023-23405
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0.009
Percentile
82.8%
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected configurations
Node
microsoftwindows_10_1507Range<10.0.10240.19805
ORmicrosoftwindows_10_1607Range<10.0.14393.5786
ORmicrosoftwindows_10_1809Range<10.0.17763.4131
ORmicrosoftwindows_10_20h2Range<10.0.19042.2728
ORmicrosoftwindows_10_21h2Range<10.0.19044.2728
ORmicrosoftwindows_10_22h2Range<10.0.19045.2728
ORmicrosoftwindows_11_21h2Range<10.0.22000.1696
ORmicrosoftwindows_11_22h2Range<10.0.22000.1413
ORmicrosoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_10_1507 | * | cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1607 | * | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1809 | * | cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* |
| microsoft | windows_10_20h2 | * | cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:* |
| microsoft | windows_10_21h2 | * | cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_10_22h2 | * | cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* |
| microsoft | windows_11_21h2 | * | cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_11_22h2 | * | cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:* |
Related
prion
prion
Remote code execution
2023-03-14 17:15:00
vulnrichment
vulnrichment
cvelist
cvelist
mscve
mscve
Remote Procedure Call Runtime Remote Code Execution Vulnerability
2023-03-14 07:00:00
cve
cve
CVE-2023-23405
2023-03-14 17:15:13
avleonov
avleonov
nessus
nessus
KB5023754: Windows Server 2008 Security Update (March 2023)
2023-03-14 00:00:00
KB5023759: Windows Server 2008 R2 Security Update (March 2023)
2023-03-14 00:00:00
mskb
mskb
March 14, 2023âKB5023755 (Monthly Rollup)
2023-03-14 07:00:00
March 14, 2023âKB5023754 (Security-only update)
2023-03-14 07:00:00
March 14, 2023âKB5023759 (Security-only update)
2023-03-14 07:00:00
kaspersky
kaspersky
KLA48554 Multiple vulnerabilities in Microsoft Products (ESU)
2023-03-14 00:00:00
KLA48553 Multiple vulnerabilities in Microsoft Windows
2023-03-14 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5023713)
2023-03-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5023706)
2023-07-21 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5023696)
2023-03-15 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - March 2023
2023-03-14 23:46:44
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0.009
Percentile
82.8%
Related for NVD:CVE-2023-23405