CVE-2023-28238

Меры по смягчению последствий

Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might be helpful in your situation:

Only systems with the IKE and AuthIP IPsec Keying Modules running are vulnerable to this attack.

You can run either of the following commands to check the running status of this service:

PS: C:\> Get-Service Ikeext

• OR

Cmd: C:\> sc query ikeext

This mitigation could have negative affects on your IPSec functionality. Microsoft strongly recommends updating your system with the latest Windows security updates.

FAQ

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.