CVE-2023-21695
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute code remotely.
Risk Assessment
An attacker could remotely take control of the system or execute malicious code.
Recommendation
Apply security updates provided by Microsoft.
Other vulnerabilities in Microsoft PEAP
See all- CVE-2023-21692Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21690Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21689Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute arbitrary code.
- CVE-2023-21701High
Denial of Service vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could cause the service to crash, leading to unavailability of authentication.
- CVE-2023-21691High
Information Disclosure vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit this vulnerability to gain access to sensitive information.
Original NVD description (English source)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability