Critical Β· published February 15, 2023
π¨ A single crafted authentication request could lead to full remote code execution! This vulnerability in Microsoft's PEAP is alarmingly critical! π₯ Think of this as a hotel where anyone can check in simply by presenting a fake reservation β once inside, they could access any room and take whatever they want! An attacker could exploit this vulnerability to execute arbitrary code on affected systems, potentially gaining complete control over the network. This means they could access sensitive data, install malware, or disrupt critical services. Itβs absolutely devastating if left unaddressed!
Think of this as a hotel where anyone can check in simply by presenting a fake reservation β once inside, they could access any room and take whatever they want! This vulnerability allows remote code execution due to improper handling of authentication requests in the Protected Extensible Authentication Protocol (PEAP), enabling attackers to execute harmful code without authentication.
An attacker could exploit this vulnerability to execute arbitrary code on affected systems, potentially gaining complete control over the network. This means they could access sensitive data, install malware, or disrupt critical services. Itβs absolutely devastating if left unaddressed! Immediately apply the latest security patch from Microsoft to address this vulnerability. Ensure that all systems utilizing PEAP are updated and conduct a thorough audit of authentication methods to enhance security. Don't delay! You've got this! By following these steps, you'll safeguard your systems from this serious threat! π‘οΈ
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft/windows_10_1507 | < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft/windows_10_1607 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft/windows_10_1607 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft/windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft/windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft/windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft/windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft/windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft/windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft/windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft/windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft/windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft/windows_11_21h2 | < 10.0.22000.1574 | 10.0.22000.1574 |
| microsoft/windows_11_21h2 | < 10.0.22000.1574 | 10.0.22000.1574 |
| microsoft/windows_11_22h2 | < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft/windows_11_22h2 | < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft/windows_server_2008 | all versions | β |
| microsoft/windows_server_2008 | all versions | β |
| microsoft/windows_server_2008 | all versions | β |
| microsoft/windows_server_2012 | all versions | β |
| microsoft/windows_server_2012 | all versions | β |
| microsoft/windows_server_2016 | all versions | β |
| microsoft/windows_server_2019 | all versions | β |
| microsoft/windows_server_2022 | all versions | β |