CVE-2021-24111 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
microsoft	CNA	7.5 HIGH				CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 96%

Affected Products (NVD)

Vendor	Product	Version
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.8

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

1607 (x64, x86)	KB4601051
1607 (x64, x86)	KB4601318
1803 (arm64, x64, x86)	KB4601354
1803 (x64, x86)	KB4601054
1809 (x64, x86)	KB4601887
1909 (arm64, x64, x86)	KB4601056
2004 (arm64, x64, x86)	KB4601050
20H2 (arm64, x86)	KB4601050

Windows 7

Service Pack 1 (x64, x64, x86, x86)

Windows 8.1

(x64, x64, x86, x86)

Windows RT 8.1

All

Windows Server

1909 Server Core	KB4601056
2004 Server Core	KB4601050
20H2 Server Core	KB4601050

Windows Server 2008

Service Pack 2 (x64, x86)

Windows Server 2008 R2

Service Pack 1 (x64, x64)	KB4603002
Service Pack 1 Server Core (x64, x64)	KB4603002

Windows Server 2012

Server Core	KB4603003
Standard	KB4603003

Windows Server 2012 R2

Server Core	KB4603004
Standard	KB4603004

Windows Server 2016

Server Core	KB4601051
Server Core	KB4601318
Standard	KB4601051
Standard	KB4601318

Windows Server 2019

Server Core	KB4601887
Standard	KB4601887

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24111

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24111