HPI-VDB — Database for IT-Attack Analysis


ID: CVE-2023-29325

Last Modified: May 15, 2023

Windows OLE Remote Code Execution Vulnerability

Twitter Activity

Tweets last week: 0

Remaining steady

Yahoo Activity

Yahoo results: 0

Remaining steady

EPSS History

Current EPSS Score: 0.02895

Remaining steady

Reddit Activity

Reddit Posts: 3

Remaining steady

Github Repos

Github Repos: 0

Remaining steady

Exploits

Found exploits:

Attack Vector: Network

Attack Complexity: High

Privileges Required: None

User Interaction: Required

Scope: Unchanged

Confidentiality: High

Integrity: High

Availability: High

Base Score: 7.5

Exploitability Score: 1.6

Impact Score: 5.9

CVSS V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Specialize CVSS-Score

NVD-CWE-noinfo

['alert file ( msg:"FILE-OFFICE Microsoft Office Outlook remote code execution attempt"; file_data; content:"|80 01 F7 20 02 A2 20 08 55 02 80 0E 7D 0A 81 0B B5 0E 50 4C 53 49 44 08 3A 20 30 10 22 33 31 35 2D 3B 10 22 10 A4 43 10 21 10 A3 11 A4 34 36 14|",fast_pattern,nocase; metadata:policy max-detect-ips drop,policy security-ips drop; reference:cve,2023-29325; reference:url,portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2023-29325; classtype:attempted-user; gid:1; sid:300525; rev:1; )\n']

Condition Configuration
OR
OR
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Alle Schwachstellen für microsoft
Date: May 15, 2023

CWE-ID: Not defined
Base Score V3: 8.1
Exploitability Score V3: 2.2
Cvss Vector V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Configuration:
added:
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*


                    <?xml version="1.0" ?>
<set operator="and">
    <set operator="or">
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*"/>
    </set>
</set>

                  
                      <?xml version="1.0" ?>
<set operator="and">
    <set operator="or">
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*"/>
    </set>
    <prop key="program_influence" value="input"/>
</set>