CVE-2023-35629

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-35629
Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35629 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
History

14 Dec 2023, 20:47

Type Values Removed Values Added
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35629 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35629 - Patch, Vendor Advisory
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
First Time Microsoft windows 10 1507
Microsoft windows Server 2012
Microsoft
Microsoft windows Server 2008
Summary
  • (es) Vulnerabilidad de ejecución remota de código del controlador de dispositivo Microsoft USBHUB 3.0

12 Dec 2023, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-12 18:15

Updated : 2023-12-14 20:47

NVD link : CVE-2023-35629

Mitre link : CVE-2023-35629

CVE.ORG link : CVE-2023-35629

JSON object : View

Products Affected

microsoft

  • windows_10_1507
  • windows_server_2008
  • windows_server_2012
CWE
NVD-CWE-noinfo