CVE-2021-28316: Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
Published Apr 13, 2021
·Updated
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
Affected Software
18 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=1607
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Apr 13, 2021
CVE Published
07:32 PM
Data Sourced
07:32 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-28316?
CVE-2021-28316 is a vulnerability in the Windows WLAN AutoConfig Service that allows security features to be bypassed.
2
Which software versions are affected by CVE-2021-28316?
Microsoft Windows 10, Windows 7, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows Server 2016, and Windows Server 2019 are affected by CVE-2021-28316.
3
What is the severity of CVE-2021-28316?
CVE-2021-28316 has a severity rating of 4.6 (medium).
4
How does CVE-2021-28316 affect Windows?
CVE-2021-28316 allows attackers to bypass security features in the Windows WLAN AutoConfig Service.
5
Is there a fix for CVE-2021-28316?
Yes, Microsoft has released a security update to address CVE-2021-28316. It is recommended to install the latest updates to protect against this vulnerability.