CVE Catalog

CVE-2023-35344

MediumCVSS 6.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.61%

44th percentile - higher than 44% of all known CVEs

Summary

A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to take control of the system.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to data loss or system takeover. Exploitation of this vulnerability can have serious security implications.

Recommendation

It is recommended to update the DNS server to the latest version to mitigate this vulnerability. Additionally, systems should be monitored for suspicious activity.

Original NVD description (English source)

Windows DNS Server Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS