Lucene search

K
mscveMicrosoftMS:CVE-2023-28277
HistoryApr 11, 2023 - 7:00 a.m.

Windows DNS Server Information Disclosure Vulnerability

2023-04-1107:00:00
Microsoft
msrc.microsoft.com
23
windows dns server
information disclosure
vulnerability
microsoft

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0.007

Percentile

80.9%

Affected configurations

Vulners
Node
microsoftwindows_server_2022Range<10.0.20348.1668
OR
microsoftwindows_server_2022Range<10.0.20348.1668
VendorProductVersionCPE
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0.007

Percentile

80.9%