CVE-2023-21820
published 2023-02-14CVE-2023-21820: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
PriorityP337high7.4CVSS 3.1
AVAACLPRLUIRSUCHIHAH
EPSS
0.63%
46.2th percentile
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Affected
41 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10 | < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft | windows_10_1607 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft | windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft | windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft | windows_10_version_1507 | >= 10.0.10240.0 < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft | windows_10_version_1607 | >= 10.0.14393.0 < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_10_version_1809 | >= 10.0.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_version_1809 | >= 10.0.17763.0 < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft | windows_10_version_20h2 | >= 10.0.0 < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft | windows_10_version_21h2 | >= 10.0.19043.0 < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft | windows_10_version_22h2 | >= 10.0.19045.0 < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft | windows_11_21h2 | < 10.0.22000.1574 | 10.0.22000.1574 |
| microsoft | windows_11_22h2 | < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft | windows_11_version_21h2 | >= 10.0.0 < 10.0.22621.1574 | 10.0.22621.1574 |
| microsoft | windows_11_version_22h2 | >= 10.0.22621.0 < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.1.7601.0 < 6.1.7601.26366 | 6.1.7601.26366 |
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.6003.0 < 6.0.6003.21915 | 6.0.6003.21915 |
| microsoft | windows_server_2012 | — | — |
| microsoft | windows_server_2012 | >= 6.2.9200.0 < 6.2.9200.24116 | 6.2.9200.24116 |
| microsoft | windows_server_2012_r2 | >= 6.3.9600.0 < 6.3.9600.20821 | 6.3.9600.20821 |
| microsoft | windows_server_2016 | >= 10.0.14393.0 < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft | windows_server_2019 | >= 10.0.17763.0 < 10.0.17763.4010 | 10.0.17763.4010 |
CVSS provenance
nvdv3.17.4HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
vendor_msrc7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xgr9-7593-ff2p: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
ghsa_unreviewed·2023-02-14
CVE-2023-21820 [HIGH] GHSA-xgr9-7593-ff2p: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Microsoft
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
vendor_msrc·2023-02-14·CVSS 7.4
CVE-2023-21820 [HIGH] CWE-126 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
FAQ: According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires that an attacker will need to first gain access to the restricted network before running an attack.
FAQ: According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
This vulnerability could be triggered when a windows client connects to a malicious remote share.
FAQ: According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
Windo
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-02-14
Published