Skip to content
OpenAdvisories
High MSRC-CVE-2023-21691 1 CVE

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

Published Feb 14, 2023 · Updated Feb 14, 2023

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.

How could an attacker exploit this vulnerability?
An authenticated attacker could attack a Microsoft Protected Extensible Authentication Protocol (PEAP) Server by sending specially crafted malicious PEAP packets over the network.

Security updates
10.0.17763.4010 — https://support.microsoft.com/help/5022840
10.0.20348.1547 — https://support.microsoft.com/help/5022842
10.0.20348.1540 — https://support.microsoft.com/help/5022921
10.0.19042.2604 — https://support.microsoft.com/help/5022834
10.0.22621.1574 — https://support.microsoft.com/help/5022836
10.0.22621.1265 — https://support.microsoft.com/help/5022845
10.0.10240.19747 — https://support.microsoft.com/help/5022858
10.0.14393.5717 — https://support.microsoft.com/help/5022838
6.0.6003.21915 — https://support.microsoft.com/help/5022890
6.0.6003.21915 — https://support.microsoft.com/help/5022893
6.1.7601.26366 — https://support.microsoft.com/help/5022872
6.1.7601.26366 — https://support.microsoft.com/help/5022874
6.2.9200.24116 — https://support.microsoft.com/help/5022903
6.2.9200.24116 — https://support.microsoft.com/help/5022895
6.3.9600.20821 — https://support.microsoft.com/help/5022899
6.3.9600.20821 — https://support.microsoft.com/help/5022894

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References