CVE-2021-24073: Skype for Business and Lync Spoofing Vulnerability
Published Feb 25, 2021
·Updated
Skype for Business and Lync Spoofing Vulnerability
Affected Software
2 affected components
Microsoft Lync Server=2013
Microsoft Skype for Business Server=2015-cu8
Remediation
Event History
Feb 25, 2021
CVE Published
11:01 PM
Data Sourced
11:01 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-24073?
CVE-2021-24073 is a spoofing vulnerability in Skype for Business and Lync that allows an attacker to impersonate another user.
2
What software is affected by CVE-2021-24073?
Microsoft Lync Server 2013 and Microsoft Skype For Business Server 2015-cu8 are affected by CVE-2021-24073.
3
How severe is the vulnerability CVE-2021-24073?
The severity of CVE-2021-24073 is high, with a CVSS score of 7.1.
4
How can I fix CVE-2021-24073?
To fix CVE-2021-24073, it is recommended to apply the necessary security updates provided by Microsoft.
5
Where can I find more information about CVE-2021-24073?
You can find more information about CVE-2021-24073 on the Microsoft Security Response Center advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24073.