CVE-2021-31976: Server for NFS Information Disclosure Vulnerability
Published Jun 8, 2021
·Updated
Server for NFS Information Disclosure Vulnerability
Affected Software
15 affected components
Microsoft Windows 10
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=1607
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Jun 8, 2021
CVE Published
10:46 PM
Data Sourced
10:46 PM
DescriptionSeverity
Frequently Asked Questions
1
Which systems are in scope for this issue?
The affected software listed includes Microsoft Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2012, Windows Server 2016, and Windows Server 2019.
2
Can this be exploited remotely without credentials or user interaction?
The supplied vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.
3
What is the likely security impact?
The provided severity vector indicates high confidentiality impact, with no integrity or availability impact.
4
What should organizations do to remediate the issue?
A patch is available. Apply the vendor-provided update for affected Windows systems.