CVE-2023-21689
Published Feb 14, 2023
Last updated 6 months ago
Overview
- Description
- Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- Source
- secure@microsoft.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- secure@microsoft.com
- CWE-122
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "C1BEE482-6A48-4238-B435-5F9EEC091ADA",
"versionEndExcluding": "10.0.10240.19747"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3",
"versionEndExcluding": "10.0.10240.19747"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "A4F0F6D2-7E7B-4E3E-B160-65038A850B34",
"versionEndExcluding": "10.0.14393.5717"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "8C826787-EBA0-4087-9F36-30B8192B2056",
"versionEndExcluding": "10.0.14393.5717"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "E65DF61A-C497-4545-B95E-11E2FAFE1F2D",
"versionEndExcluding": "10.0.17763.4010"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "3658090D-8E87-4CE4-BAE5-A7ADED6DC296",
"versionEndExcluding": "10.0.17763.4010"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71",
"versionEndExcluding": "10.0.17763.4010"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "FC73806E-125C-470E-8123-945B9366BB24",
"versionEndExcluding": "10.0.19042.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2",
"versionEndExcluding": "10.0.19042.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8",
"versionEndExcluding": "10.0.19042.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "9F74B22E-55BC-4646-95D5-049099ED1DEC",
"versionEndExcluding": "10.0.19044.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "0721D979-707D-4EE6-ABC7-5957D8F50391",
"versionEndExcluding": "10.0.19044.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "EB662E36-78A1-4004-AE03-F5693C1BED2A",
"versionEndExcluding": "10.0.19044.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208",
"versionEndExcluding": "10.0.19045.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "8FD8C3D8-808A-4A01-921D-243F8317F694",
"versionEndExcluding": "10.0.19045.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36",
"versionEndExcluding": "10.0.19045.2604"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "8E0C624C-A725-425E-BE3C-43CA28379263",
"versionEndExcluding": "10.0.22000.1574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "D39AA669-F9A5-4678-AE40-F6362BA95C71",
"versionEndExcluding": "10.0.22000.1574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "9689E7AA-B2EA-428C-945F-54935922861D",
"versionEndExcluding": "10.0.22621.1265"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "C819525C-9D6E-4097-9D48-6E2131B3FD90",
"versionEndExcluding": "10.0.22621.1265"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
}
],
"operator": "OR"
}
]
}
]