CVE-2023-21803

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_10:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_1607:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_20h2:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_21h2:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_22h2:::::::x86:*
	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x86:*

History

29 May 2024, 03:15

Type	Values Removed	Values Added
CWE		CWE-190

Information

Published : 2023-02-14 20:15

Updated : 2024-05-29 03:15

NVD link : CVE-2023-21803

Mitre link : CVE-2023-21803

CVE.ORG link : CVE-2023-21803

JSON object : View

Products Affected

microsoft

windows_10_22h2
windows_10_21h2
windows_10_20h2
windows_server_2008
windows_10_1809
windows_10
windows_10_1607

CWE

NVD-CWE-noinfo CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2023-21803", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-02-14T20:15:15.503", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "Windows iSCSI Discovery Service Remote Code Execution Vulnerability"}], "lastModified": "2024-05-29T03:15:35.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "3A08FFE4-04F1-402C-9C51-510C2001BAAD", "versionEndExcluding": "10.0.10240.19747"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "8C826787-EBA0-4087-9F36-30B8192B2056", "versionEndExcluding": "10.0.14393.5717"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71", "versionEndExcluding": "10.0.17763.4010"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8", "versionEndExcluding": "10.0.19042.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "EB662E36-78A1-4004-AE03-F5693C1BED2A", "versionEndExcluding": "10.0.19044.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36", "versionEndExcluding": "10.0.19045.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}