CVE-2021-43238: Microsoft Windows Remote Access Connection Manager Service Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Remote Access Connection Manager service. By creating a directory junction, an attacker can abuse the service to create a directory. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Other sources
Windows Remote Access Elevation of Privilege Vulnerability
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43238?
CVE-2021-43238 is classified as a denial-of-service vulnerability that can be exploited by local attackers on affected Microsoft Windows installations.
How do I fix CVE-2021-43238?
To fix CVE-2021-43238, apply the relevant security updates or patches provided by Microsoft for your specific version of Windows.
Which versions of Windows are affected by CVE-2021-43238?
CVE-2021-43238 affects multiple versions of Microsoft Windows, including various editions of Windows 10, Windows 11, and Windows Server.
What are the consequences of exploiting CVE-2021-43238?
Exploitation of CVE-2021-43238 can lead to a denial-of-service condition, causing affected systems to become unresponsive.
Is user interaction required to exploit CVE-2021-43238?
Yes, an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit CVE-2021-43238.