CVE-2023-21691
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
Information Disclosure vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit this vulnerability to gain access to sensitive information.
Risk Assessment
The risk is potential leakage of authentication data or other sensitive information, which could compromise network security.
Recommendation
Install the latest Windows security updates to mitigate this vulnerability.
Other vulnerabilities in Microsoft PEAP
See all- CVE-2023-21692Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21690Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21689Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute arbitrary code.
- CVE-2023-21701High
Denial of Service vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could cause the service to crash, leading to unavailability of authentication.
- CVE-2023-21695High
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute code remotely.
Original NVD description (English source)
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability