CVE-2023-21803: Windows iSCSI Discovery Service Remote Code Execution Vulnerability
Published Feb 14, 2023
·Updated
Windows iSCSI Discovery Service Remote Code Execution Vulnerability
Affected Software
15 affected componentsFixes available
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows 10=20H2
Microsoft Windows 10=1809
Microsoft Windows 10=22H2
Microsoft Windows 10=1607
Microsoft Windows 10=21H2
Microsoft Windows 10
Microsoft Windows 10<10.0.10240.19747
Microsoft Windows 10 1607<10.0.14393.5717
Microsoft Windows 10 1809<10.0.17763.4010
Microsoft Windows 10 20h2<10.0.19042.2604
Microsoft Windows 10 21h2<10.0.19044.2604
Microsoft Windows 10 22h2<10.0.19045.2604
Microsoft Windows Server 2008=sp2
Remediation
Event History
Feb 14, 2023
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:33 PM
Data Sourced
via MITRE·07:33 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-21803?
CVE-2023-21803 is rated as critical, allowing remote code execution if exploited.
2
How do I fix CVE-2023-21803?
To fix CVE-2023-21803, apply the relevant security updates provided by Microsoft for your affected version of Windows.
3
Which versions of Windows are affected by CVE-2023-21803?
CVE-2023-21803 affects multiple versions of Windows 10, including 20H2, 21H2, 22H2, and also Windows Server 2008.
4
Can CVE-2023-21803 affect Windows Server 2008 systems?
Yes, CVE-2023-21803 can affect Windows Server 2008 systems running specific configurations.
5
What type of vulnerability is CVE-2023-21803?
CVE-2023-21803 is a remote code execution vulnerability in the Windows iSCSI Discovery Service.