CVE Catalog

CVE-2023-35331

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.68%

47th percentile - higher than 47% of all known CVEs

Summary

A vulnerability in Windows Local Security Authority (LSA) allows attackers to trigger a denial of service (DoS) by sending specially crafted requests. This can lead to the unavailability of security services in the system.

Risk Assessment

Organizations may experience interruptions in the availability of security services, which can impact the integrity and confidentiality of data. A DoS attack can lead to significant disruptions in business operations.

Recommendation

It is recommended to update the operating system to the latest version to patch this vulnerability. Additionally, monitoring system logs for potential attack attempts is advised.

Original NVD description (English source)

Windows Local Security Authority (LSA) Denial of Service Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS