CVE-2023-34367
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack, including many IoT devices.
Risk Assessment
This vulnerability may allow attackers to take control of TCP/IP connections, potentially leading to unauthorized access to data. However, the vendor considers this a low severity issue.
Recommendation
It is recommended to upgrade the operating system to a newer version to minimize the risk associated with this vulnerability. Additionally, it is advisable to monitor and secure IoT devices against potential attacks.
Original NVD description (English source)
Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a low severity issue.