Skip to content
OpenAdvisories
Critical MSRC-CVE-2023-28231 1 CVE

DHCP Server Service Remote Code Execution Vulnerability

Published Apr 11, 2023 · Updated Apr 14, 2023 · Revision 2

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires that an attacker will need to first gain access to the restricted network before running an attack.

How could an attacker exploit this vulnerability?
An unauthenticated attacker could leverage a specially crafted call to the DHCP service to exploit this vulnerability.

Security updates
10.0.17763.4252 — https://support.microsoft.com/help/5025229
10.0.20348.1668 — https://support.microsoft.com/help/5025230
10.0.14393.5850 — https://support.microsoft.com/help/5025228
6.0.6003.22015 — https://support.microsoft.com/help/5025271
6.0.6003.22015 — https://support.microsoft.com/help/5025273
6.1.7601.26466 — https://support.microsoft.com/help/5025279
6.1.7601.26466 — https://support.microsoft.com/help/5025277
6.2.9200.24216 — https://support.microsoft.com/help/5025287
6.2.9200.24216 — https://support.microsoft.com/help/5025272
6.3.9600.20919 — https://support.microsoft.com/help/5025285
6.3.9600.20919 — https://support.microsoft.com/help/5025288

Vulnerabilities 1

Revision history

  1. #2

    Updated FAQ information. This is an informational change only.

  2. #1

    Information published.

References