VDB

CVE-2023-21689

CVE-2023-21689 PUBLISHED CVSS 9.800000190734863 CRITICAL

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

EPSS 29.38% · 96.7th percentile

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
29.38%
96.7th percentile

Affected Products

VendorProductVersions
microsoftwindows_10_20h20, 0, 0
MicrosoftWindows 10 Version 160710.0.14393.0
microsoftwindows_10_20H210.0.0
microsoftwindows_server_2008_R26.1.7601.0, 6.1.7601.0
MicrosoftWindows 11 version 21H210.0.0
microsoftwindows_server_2008r2, r2, r2
microsoftwindows_server_201610.0.14393.0, 10.0.14393.0
MicrosoftWindows 10 Version 180910.0.0, 10.0.17763.0
microsoftwindows_10_22h20, 0, 0
MicrosoftWindows Server 2016 (Server Core installation)10.0.14393.0
microsoftwindows_11_22h20, 0, 0
MicrosoftWindows Server 20126.2.9200.0
microsoftwindows_11_21h20, 0, 0
microsoftwindows_server_20126.2.9200.0, 6.2.9200.0, *
MicrosoftWindows Server 2008 R2 Service Pack 16.1.7601.0
MicrosoftWindows 10 Version 22H210.0.19045.0
microsoftwindows_11_21H210.0.0
microsoftwindows_10_21h20, 0, 0
microsoftwindows_10_21H210.0.19043.0
microsoftwindows_server_202210.0.20348.0

…and 19 more

Timeline

  • Feb 14, 2023 CVE Published
  • Feb 15, 2023 EPSS Score
  • Feb 15, 2023 PoC Published
  • Mar 7, 2023 EPSS Score
  • Mar 19, 2023 EPSS Score
  • Apr 18, 2023 EPSS Score
  • May 8, 2023 EPSS Score
  • May 19, 2023 EPSS Score
  • May 24, 2023 EPSS Score
  • Jul 8, 2023 EPSS Score
  • Jul 20, 2023 EPSS Score
  • Aug 22, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›