CVE-2023-21803

{"id": "CVE-2023-21803", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-02-14T20:15:15.503", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Windows iSCSI Discovery Service Remote Code Execution Vulnerability"}], "lastModified": "2023-02-23T15:22:31.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "3A08FFE4-04F1-402C-9C51-510C2001BAAD", "versionEndExcluding": "10.0.10240.19747"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "8C826787-EBA0-4087-9F36-30B8192B2056", "versionEndExcluding": "10.0.14393.5717"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71", "versionEndExcluding": "10.0.17763.4010"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8", "versionEndExcluding": "10.0.19042.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "EB662E36-78A1-4004-AE03-F5693C1BED2A", "versionEndExcluding": "10.0.19044.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36", "versionEndExcluding": "10.0.19045.2604"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}