PT-2023-2463 · Microsoft · Windows Enroll Engine+1

Aapo Oksman · Publicado 2023-04-11 · Atualizado 2024-05-29 · CVE-2023-28226

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Enroll Engine (affected versions not specified)

Description The issue is related to errors in security settings of the Windows Enroll Engine component in Windows operating systems. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-254

CWE-200

CWE-347

Identificadores relacionados

BDU:2023-02253

CVE-2023-28226

Produtos afetados

Windows

Windows Enroll Engine

Referências · 10

• https://t.me/cibsecurity/61947 · Publicação no Telegram
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-28226 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-02253 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-28226 · Nota de Segurança
• https://vuldb.com/ru/?id.225588 · Nota
• https://osv.dev/vulnerability/CVE-2023-28226 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28226 · Aviso do Fabricante
• https://t.me/cvenotify/48043 · Publicação no Telegram
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28226 · Nota de Segurança
• https://cybersecurity-help.cz/vdb/SB2023041214 · Nota