CVE-2023-21690
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
Risk Assessment
Risk of authentication integrity compromise and potential system takeover.
Recommendation
Install security updates for systems using PEAP.
Other vulnerabilities in Microsoft PEAP
See all- CVE-2023-21692Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21689Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute arbitrary code.
- CVE-2023-21701High
Denial of Service vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could cause the service to crash, leading to unavailability of authentication.
- CVE-2023-21695High
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute code remotely.
- CVE-2023-21691High
Information Disclosure vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit this vulnerability to gain access to sensitive information.
Original NVD description (English source)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS