CVE-2018-8209

Опубликовано: 14 июн. 2018

Источник: nvd

CVSS3: 8

CVSS2: 2.7

EPSS Низкий

Описание

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Ссылки

http://www.securityfocus.com/bid/104393
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041101
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8209
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104393
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041101
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8209
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02789

Низкий

8 High

CVSS3

2.7 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-8209

CVSS3: 5.5

msrc

больше 7 лет назад

Windows Wireless Network Profile Information Disclosure Vulnerability

GHSA-qw7f-rj87-x99w