CVE Catalog

CVE-2023-21690

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
27.53%

98th percentile - higher than 98% of all known CVEs

Summary

Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.

Risk Assessment

Risk of authentication integrity compromise and potential system takeover.

Recommendation

Install security updates for systems using PEAP.

Original NVD description (English source)

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS