CVE-2023-24941

Windows Network File System Remote Code Execution Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
microsoftwindows_server_2012
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
microsoftwindows_server_2022
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows Server 2012
Server Core
KB5026419
Standard
KB5026419
Windows Server 2012 R2
Server Core
KB5026415
Standard
KB5026415
Windows Server 2016
Server Core
KB5026363
Standard
KB5026363
Windows Server 2019
Server Core
KB5026362
Standard
KB5026362
Windows Server 2022
Server Core
KB5026370
Standard
KB5026370
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24941
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24941