Last Modified: Sept. 14, 2023
Windows TCP/IP Information Disclosure Vulnerability
Tweets last week: 0
Remaining steady
Yahoo results: 0
Remaining steady
Current EPSS Score: 0.00045
Remaining steady
Reddit Posts: 0
Remaining steady
Github Repos: 0
Remaining steady
Found exploits:
Attack Vector: Local
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None
Base Score: 5.5
Exploitability Score:
1.8
Impact Score: 3.6
CVSS V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-668
['alert ip $EXTERNAL_NET any -> $HOME_NET any ( msg:"OS-WINDOWS Microsoft Windows TCP/IP Remote Code Execution Vulnerability attempt"; ip_proto:44; detection_filter:track by_dst,count 100,seconds 1; reference:cve,2021-24086; reference:cve,2021-24094; reference:cve,2023-38160; reference:url,portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2021-24086; reference:url,portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2021-24094; reference:url,portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2023-38160; classtype:attempted-user; gid:1; sid:57193; rev:3; )\n']
| Condition | Configuration | |
|---|---|---|
| OR | ||
| OR | ||
| cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x86:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
| cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* Part: o Vendor: microsoft | Alle Schwachstellen für microsoft | |
CWE-ID:
Not defined
Configuration:
added:
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
<?xml version="1.0" ?>
<set operator="and">
<set operator="or">
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x86:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*"/>
</set>
</set>
<?xml version="1.0" ?>
<set operator="and">
<set operator="or">
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x86:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"/>
<prop key="operating_system" value="cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*"/>
</set>
<prop key="program_influence" value="input"/>
</set>