Lucene search

K
kasperskyKaspersky LabKLA12289
HistorySep 14, 2021 - 12:00 a.m.

KLA12289 Multiple vulnerabilities in Microsoft Products (ESU)

2021-09-1400:00:00
Kaspersky Lab
threats.kaspersky.com
15

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.512 Medium

EPSS

Percentile

97.5%

Detect date:

09/14/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, spoof user interface, execute arbitrary code.

Affected products:

Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 21H1 for x64-based Systems
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 10 Version 1909 for 32-bit Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server, version 2004 (Server Core installation)
Windows Server 2016 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2016
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 1909 for x64-based Systems
Windows Server 2012 (Server Core installation)
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows 10 for x64-based Systems
Windows Server 2012 R2
Windows Server 2012
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 21H1 for 32-bit Systems
Windows Server 2019
Windows 10 Version 1607 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2019 (Server Core installation)
Windows 10 Version 20H2 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 Version 21H1 for ARM64-based Systems
Windows Server, version 20H2 (Server Core Installation)
Windows 10 for 32-bit Systems
Windows 10 Version 20H2 for 32-bit Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-38635
CVE-2021-36962
CVE-2021-38628
CVE-2021-36961
CVE-2021-38671
CVE-2021-26435
CVE-2021-38630
CVE-2021-36969
CVE-2021-36955
CVE-2021-38638
CVE-2021-36964
CVE-2021-38629
CVE-2021-40447
CVE-2021-38639
CVE-2021-36959
CVE-2021-38667
CVE-2021-38626
CVE-2021-38636
CVE-2021-36960
CVE-2021-36965
CVE-2021-36968
CVE-2021-36963
CVE-2021-38625
CVE-2021-38633

Impacts:

ACE

Related products:

Microsoft Windows

KB list:

5005633
5005606
5005615
5005618

References

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.512 Medium

EPSS

Percentile

97.5%