CVE-2023-34367

6.5MEDIUM

Key Information:

Vendor
Microsoft
Status
Windows 7
Vendor
CVE Published:
14 June 2023

Summary

Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a low severity issue.

References

http://blog.pi3.com.pl/?p=850
https://portswigger.net/daily-swig/blind-tcp-ip-hijacking...
https://pwnies.com/windows-7-blind-tcp-ip-hijacking/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.