Lucene search

[email protected]CVE-2017-0168

HistoryApr 12, 2017 - 2:59 p.m.

CVE-2017-0168

2017-04-1214:59:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2017-0168

windows

hyper-v

network switch

information disclosure

vulnerability

windows 8.1

windows server 2008

windows server 2008 r2

windows server 2012

windows server 2012 r2

authentication

guest operating system

6.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

5.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest operating system, aka “Hyper-V Information Disclosure Vulnerability.” This CVE ID is unique from CVE-2017-0169.

Affected configurations

Vulners

NVD

Node

microsoft_corporationwindows_hyper-v

CPENameOperatorVersion
microsoft:windows_8.1microsoft windows 8.1eq*
microsoft:windows_server_2008microsoft windows server 2008eq*
microsoft:windows_server_2008microsoft windows server 2008eqr2
microsoft:windows_server_2012microsoft windows server 2012eq*
microsoft:windows_server_2012microsoft windows server 2012eqr2

CPE	Name	Operator	Version
microsoft:windows_8.1	microsoft windows 8.1	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	r2
microsoft:windows_server_2012	microsoft windows server 2012	eq	*
microsoft:windows_server_2012	microsoft windows server 2012	eq	r2

CNA Affected

[
  {
    "product": "Windows Hyper-V",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2"
      }
    ]
  }
]