MSRC-CVE-2023-36914 — Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could bypass the Fast Identity Online (FIDO) secure authentication feature.

Security updates
10.0.20348.1906 — https://support.microsoft.com/help/5029250
10.0.20348.1903 — https://support.microsoft.com/help/5029367
10.0.22000.2295 — https://support.microsoft.com/help/5029253
10.0.19044.3324 — https://support.microsoft.com/help/5029244
10.0.22621.2134 — https://support.microsoft.com/help/5029263

Vulnerabilities 1

Medium 5.5

CVE-2023-36914

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Aug 8, 2023

Revision history

2023-08-08 #1
Information published.

References

CVE-2023-36914 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36914
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss