Vulnerability Name: | CVE-2021-28434 (CCN-199072) |
Assigned: | 2021-04-13 |
Published: | 2021-04-13 |
Updated: | 2021-04-16 |
Summary: | Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021-28356, CVE-2021-28357, CVE-2021-28358.
|
CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) 7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)Exploitability Metrics: | Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None | Scope: | Scope (S): Unchanged
| Impact Metrics: | Confidentiality (C): High Integrity (I): High Availibility (A): High | 8.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) 7.7 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)Exploitability Metrics: | Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None | Scope: | Scope (S): Unchanged
| Impact Metrics: | Confidentiality (C): High Integrity (I): High Availibility (A): High |
|
CVSS v2 Severity: | 6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)Exploitability Metrics: | Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance | Impact Metrics: | Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial | 9.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)Exploitability Metrics: | Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
| Impact Metrics: | Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete |
|
Vulnerability Type: | CWE-noinfo
|
Vulnerability Consequences: | Gain Access |
References: | Source: MITRE Type: CNA CVE-2021-28434
Source: XF Type: UNKNOWN ms-windows-cve202128434-code-exec(199072)
Source: CCN Type: Microsoft Security TechCenter - April 2021 Remote Procedure Call Runtime Remote Code Execution Vulnerability
Source: MISC Type: Patch, Vendor Advisory https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28434
|
Vulnerable Configuration: | Configuration 1: cpe:/o:microsoft:windows_10:-:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:20h2:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:1607:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:1803:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:1809:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:1909:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:2004:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_7:-:sp1:*:*:*:*:*:*OR cpe:/o:microsoft:windows_8.1:-:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_20h2:-:*:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_server_1909:-:*:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_server_2004:-:*:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Configuration CCN 1: cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_7:-:sp1:*:*:ultimate_n:*:x86:*OR cpe:/o:microsoft:windows_7::sp1:x64:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_8.1:-:-:-:*:-:-:x32:*OR cpe:/o:microsoft:windows_8.1:::~~~~x64~:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:-:*:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_10:::~~~~x64~:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_10:-:*:*:*:*:*:arm64:*OR cpe:/o:microsoft:windows_10:1809::~~~~x64~:*:*:*:*:*OR cpe:/o:microsoft:windows_10:1809:*:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_10:1803:*:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_10:1803::~~~~x64~:*:*:*:*:*OR cpe:/o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*OR cpe:/o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*OR cpe:/o:microsoft:windows_10:1607:*:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_10:1607::~~~~x64~:*:*:*:*:*OR cpe:/o:microsoft:windows_10:2004:*:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_10_2004:-:*:*:*:*:*:arm64:*OR cpe:/o:microsoft:windows_10_2004:-:*:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_10:1909:*:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*OR cpe:/o:microsoft:windows_10:20h2:*:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*OR cpe:/o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server:1909:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server:2004:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server:20h2:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x32:*OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* Denotes that component is vulnerable |
BACK |
microsoft windows 10 -
microsoft windows 10 20h2
microsoft windows 10 1607
microsoft windows 10 1803
microsoft windows 10 1809
microsoft windows 10 1909
microsoft windows 10 2004
microsoft windows 7 - sp1
microsoft windows 8.1 -
microsoft windows rt 8.1 -
microsoft windows server 2008 - sp2
microsoft windows server 2008 r2 sp1
microsoft windows server 2012 -
microsoft windows server 2012 r2
microsoft windows server 2016 -
microsoft windows server 2016 20h2
microsoft windows server 2016 1909
microsoft windows server 2016 2004
microsoft windows server 2019 -
microsoft windows server 2008 sp2
microsoft windows server 2008 sp2
microsoft windows 7 - sp1
microsoft windows 7 sp1
microsoft windows server 2008 r2
microsoft windows server 2012
microsoft windows 8.1 - -
microsoft windows 8.1
microsoft windows server 2012 r2
microsoft windows rt 8.1 -
microsoft windows 10 -
microsoft windows 10
microsoft windows server 2016
microsoft windows server 2019
microsoft windows 10 -
microsoft windows 10 1809
microsoft windows 10 1809
microsoft windows 10 1803
microsoft windows 10 1803
microsoft windows 10 1803
microsoft windows 10 1809
microsoft windows 10 1607
microsoft windows 10 1607
microsoft windows 10 2004
microsoft windows 10 2004
microsoft windows 10 2004
microsoft windows 10 1909
microsoft windows 10 1909
microsoft windows 10 1909
microsoft windows 10 20h2
microsoft windows 10 20h2
microsoft windows 10 20h2
microsoft windows server 2019
microsoft windows server 1909
microsoft windows server 2004
microsoft windows server 20h2
microsoft windows server 2016
microsoft windows server 2012 r2
microsoft windows server 2012
microsoft windows server 2008 sp2
microsoft windows server 2008 sp2
microsoft windows server 2008 r2