CVE-2023-36397CWE-126

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Critical · published November 14, 2023

CVSS v3.1
9.8
EPSS
18%
Percentile
97.1
In the wild
Unconfirmed
What it is

🔥 A single crafted packet can unleash chaos on your Windows system! Think of this vulnerability like a delivery driver who can pick up packages without ever checking the address. If they don’t verify the contents, they might just deliver a time bomb right to your doorstep! An attacker could exploit this vulnerability to run malicious code remotely, essentially taking control of your system without ever stepping foot inside. This could lead to complete system compromise, allowing data theft, service disruption, or worse!

Put simply

Think of this vulnerability like a delivery driver who can pick up packages without ever checking the address. If they don’t verify the contents, they might just deliver a time bomb right to your doorstep! This critical remote code execution vulnerability in Windows PGM allows attackers to send specially crafted multicast packets that can execute arbitrary code, without needing authentication. Essentially, it’s a gaping hole in your network defenses!

What to do

An attacker could exploit this vulnerability to run malicious code remotely, essentially taking control of your system without ever stepping foot inside. This could lead to complete system compromise, allowing data theft, service disruption, or worse! Make sure to apply the latest security updates from Microsoft to mitigate this vulnerability immediately. Additionally, consider disabling the PGM feature if it's not actively in use, as a precaution. It's crucial to monitor for any suspicious network activity closely! You've got this! By taking these steps, you're already on your way to becoming a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.17510 · 97.1th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2023-11-14T17:57Z
EPSS history
Timeline
  • 14 NOV 17:57Z
    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
    cvelistv5