CVE-2023-34367: Medium severity Microsoft Windows 7 vulnerability
Published Jun 14, 2023
·Updated
Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a low severity issue.
Affected Software
1 affected component
Microsoft Windows 7
Event History
Jun 14, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-34367?
CVE-2023-34367 is a vulnerability in Windows 7 that allows for a full blind TCP/IP hijacking attack.
2
Which versions of Windows are affected by CVE-2023-34367?
Windows 7 (any version until Windows 8) is affected by CVE-2023-34367.
3
What is the severity of CVE-2023-34367?
The vendor considers CVE-2023-34367 a low severity issue, but it is assigned a severity rating of 6.5.
4
How can CVE-2023-34367 be exploited?
CVE-2023-34367 can be exploited through a full blind TCP/IP hijacking attack.
5
Is there a fix for CVE-2023-34367?
There is no known fix for CVE-2023-34367, as Windows 7 is no longer supported by Microsoft.