CVE-2023-21689
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute arbitrary code.
Risk Assessment
Risk of system compromise if an attacker can deliver malicious network packets.
Recommendation
Apply security patches for PEAP from Microsoft.
Other vulnerabilities in Microsoft PEAP
See all- CVE-2023-21692Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21690Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21701High
Denial of Service vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could cause the service to crash, leading to unavailability of authentication.
- CVE-2023-21695High
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute code remotely.
- CVE-2023-21691High
Information Disclosure vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit this vulnerability to gain access to sensitive information.
Original NVD description (English source)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS