CVE-2023-21701
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk75th percentile - higher than 75% of all known CVEs
Summary
Denial of Service vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could cause the service to crash, leading to unavailability of authentication.
Risk Assessment
The risk is disruption of PEAP authentication, which may affect availability of network and dependent services.
Recommendation
Install the latest Windows security updates to mitigate this vulnerability.
Other vulnerabilities in Microsoft PEAP
See all- CVE-2023-21692Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21690Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
- CVE-2023-21689Critical
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute arbitrary code.
- CVE-2023-21695High
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute code remotely.
- CVE-2023-21691High
Information Disclosure vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit this vulnerability to gain access to sensitive information.
Original NVD description (English source)
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability