Windows SMB Witness Service Elevation of Privilege Vulnerability
CVE-2023-21549
8.8HIGH
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 10 January 2023
Summary
The Windows SMB Witness Service contains a vulnerability that allows an attacker with low privileges to execute arbitrary code with elevated privileges. By exploiting this flaw, an attacker can gain control over the system, potentially leading to unauthorized access to sensitive data and further exploitation of the network. It is essential for users and administrators to apply the appropriate security updates and patches to mitigate this risk effectively.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.19685
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.5648
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.3887
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database