Lucene search

K
mskbMicrosoftKB5000688
HistoryFeb 09, 2021 - 8:00 a.m.

Description of the security update for Skype for Business Server and Lync Server: February 9, 2021 (KB5000688)

2021-02-0908:00:00
Microsoft
support.microsoft.com
13

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

6.8 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

31.1%

Description of the security update for Skype for Business Server and Lync Server: February 9, 2021 (KB5000688)

Summary

This security update resolves a spoofing vulnerability in Microsoft Skype for Business Server and Microsoft Lync Server. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2021-24073.NoteTo apply this security update, you must have the release version of the following products installed:

  • Skype for Business Server 2015 CU 8
  • Microsoft Lync Server 2013

How to get and install the update

To get this update, install the following updates:

More information

Security update deployment information

For deployment information about this update, see security update deployment information: February 9, 2021.

How to get help and support for this security update

Protect yourself online: Windows Security supportLearn how we guard against cyber threats: Microsoft Security

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

6.8 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

31.1%