PT-2023-3861 · Microsoft · Windows Remote Desktop Protocol+1

Dor Dali · Publicado 2023-07-11 · Atualizado 2024-05-29 · CVE-2023-35332

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol (affected versions not specified)

Description The issue is related to errors in security settings of the Windows Remote Desktop Protocol implementation, allowing a remote attacker to conduct "man-in-the-middle" attacks. A security-feature bypass vulnerability exists, enabling attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

CWE-254

Identificadores relacionados

BDU:2023-04153

CVE-2023-35332

Produtos afetados

Windows

Windows Remote Desktop Protocol

Referências · 9

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-35332 · Aviso do Fabricante
• https://cybersecurity-help.cz/vdb/SB2023071283 · Nota
• https://twitter.com/hetmehtaa/status/1690586923247812608 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-04153 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35332 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-35332 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-35332 · Nota de Segurança
• https://t.me/cvenotify/54401 · Publicação no Telegram
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35332 · Nota de Segurança