CVE-2018-8209 — Sensitive Information Exposure in Microsoft Windows 10

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
8.0HIGHNVD
EPSS
2.6%
top 14.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Windows 10Microsoft Windows 10 ServersMicrosoft Windows Server 2016
Timeline
PublishedJun 14
Latest updateMay 13

Description

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages5 packages

▶CVEListV5microsoft/windows_10_serversversion 1709 (Server Core Installation)
▶CVEListV5microsoft/windows_server_2016(Server Core installation)
▶CVEListV5microsoft/windows_108 versions+7
▶NVDmicrosoft/windows_101607, 1703, 1709+2

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qw7f-rj87-x99w: An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Wi↗2022-05-13
▶
CVEList
CVE-2018-8209: An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Wi↗2018-06-14
▶

📋Vendor Advisories

1
Microsoft
Windows Wireless Network Profile Information Disclosure Vulnerability↗2018-06-12
▶
CVE-2018-8209 — Sensitive Information Exposure | cvebase