CVE-2018-8209: Infoleak

Published Jun 14, 2018

Updated

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Affected Software

6 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8209

Event History

Jun 14, 2018

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionWeakness

Data Sourced

via NVD·12:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-8209?

CVE-2018-8209 is rated as important due to its potential for information disclosure.

How do I fix CVE-2018-8209?

To mitigate CVE-2018-8209, install the latest security updates provided by Microsoft for affected versions of Windows.

What versions of Windows are affected by CVE-2018-8209?

CVE-2018-8209 affects Windows Server 2016 and various versions of Windows 10.

What type of vulnerability is CVE-2018-8209?

CVE-2018-8209 is an information disclosure vulnerability related to wireless LAN profiles.

Can regular users exploit CVE-2018-8209 to access sensitive data?

Yes, a normal user can exploit CVE-2018-8209 to access wireless LAN profile information of administrative users.