Lucene search

K
mscveMicrosoftMS:CVE-2023-28254
HistoryApr 11, 2023 - 7:00 a.m.

Windows DNS Server Remote Code Execution Vulnerability

2023-04-1107:00:00
Microsoft
msrc.microsoft.com
17
windows
dns
server
remote code execution
vulnerability
microsoft

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.018

Percentile

88.4%

Affected configurations

Vulners
Node
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server_2012Range<6.3.9600.20919r2
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<6.2.9200.24216
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<6.2.9200.24216
OR
microsoftwindows_server_2012Range<6.2.9200.24216
OR
microsoftwindows_server_2012Range<6.2.9200.24216
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2x64
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2x64
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2x64
OR
microsoftwindows_server_2008Range<6.1.7601.26466r2x64
OR
microsoftwindows_server_2008Range<6.0.6003.22015x64
OR
microsoftwindows_server_2008Range<6.0.6003.22015x64
OR
microsoftwindows_server_2008Range<6.0.6003.22015x64
OR
microsoftwindows_server_2008Range<6.0.6003.22015x64
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<6.0.6003.22015
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<6.0.6003.22015
OR
microsoftwindows_10_2004_for_32-bit_systemsRange<6.0.6003.22015
OR
microsoftwindows_10_2004_for_32-bit_systemsRange<6.0.6003.22015
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<10.0.14393.5850
OR
microsoftwindows_server_2016Range<10.0.14393.5850
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<10.0.20348.1668
OR
microsoftwindows_server_2022Range<10.0.20348.1668
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<10.0.17763.4252
OR
microsoftwindows_server_2019Range<10.0.17763.4252

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.018

Percentile

88.4%