๐Ÿ” CVE Alert

CVE-2023-21690

CRITICAL 9.8

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

Vendor microsoft
Product windows 10 version 1809
Ecosystems
Industries
TechnologyEnterprise
Published Feb 14, 2023
Last Updated Jan 1, 2025
Stay Ahead of the Next One

Get instant alerts for microsoft windows 10 version 1809

Be the first to know when new critical vulnerabilities affecting microsoft windows 10 version 1809 are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Microsoft / Windows 10 Version 1809
10.0.17763.0 < 10.0.17763.4010
Microsoft / Windows 10 Version 1809
10.0.0 < 10.0.17763.4010
Microsoft / Windows Server 2019
10.0.17763.0 < 10.0.17763.4010
Microsoft / Windows Server 2019 (Server Core installation)
10.0.17763.0 < 10.0.17763.4010
Microsoft / Windows Server 2022
10.0.20348.0 < 10.0.20348.1547
Microsoft / Windows 10 Version 20H2
10.0.0 < 10.0.19042.2604
Microsoft / Windows 11 version 21H2
10.0.0 < 10.0.22621.1574
Microsoft / Windows 10 Version 21H2
10.0.19043.0 < 10.0.19044.2604
Microsoft / Windows 11 version 22H2
10.0.22621.0 < 10.0.22621.1265
Microsoft / Windows 10 Version 22H2
10.0.19045.0 < 10.0.19045.2604
Microsoft / Windows 10 Version 1507
10.0.10240.0 < 10.0.10240.19747
Microsoft / Windows 10 Version 1607
10.0.14393.0 < 10.0.14393.5717
Microsoft / Windows Server 2016
10.0.14393.0 < 10.0.14393.5717
Microsoft / Windows Server 2016 (Server Core installation)
10.0.14393.0 < 10.0.14393.5717
Microsoft / Windows Server 2008 R2 Service Pack 1
6.1.7601.0 < 6.1.7601.26366
Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)
6.1.7601.0 < 6.1.7601.26366
Microsoft / Windows Server 2012
6.2.9200.0 < 6.2.9200.24116
Microsoft / Windows Server 2012 (Server Core installation)
6.2.9200.0 < 6.2.9200.24116
Microsoft / Windows Server 2012 R2
6.3.9600.0 < 6.3.9600.20821
Microsoft / Windows Server 2012 R2 (Server Core installation)
6.3.9600.0 < 6.3.9600.20821

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
msrc.microsoft.com: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21690