Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2023-38148

Опубликовано: 12 сент. 2023
Источник: msrc
CVSS3: 8.8
EPSS Низкий

Описание

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Меры по смягчению последствий

The following mitigating factors might be helpful in your situation:

Exploitation of this vulnerability requires that the Internet Connection Sharing (ICS) is enabled.

FAQ

How could an attacker exploit this vulnerability?

An unauthorized attacker could exploit this Internet Connection Sharing (ICS) vulnerability by sending a specially crafted network packet to the Internet Connection Sharing (ICS) Service.

According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?

This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.

Обновления

ПродуктСтатьяОбновление
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 11 version 21H2 for x64-based Systems
Windows 11 version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 11 Version 22H2 for ARM64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 10 Version 22H2 for x64-based Systems

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation More Likely

DOS

N/A

EPSS

Процентиль: 88%
0.04178
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
почти 2 года назад

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS3: 8.8
github
почти 2 года назад

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS3: 8.8
fstec
почти 2 года назад

Уязвимость функции Internet Connection Sharing (ICS) операционной системы Windows, позволяющая выполнить произвольный код

EPSS

Процентиль: 88%
0.04178
Низкий

8.8 High

CVSS3