CVE-2023-34367
First published: Wed Jun 14 2023(Updated: )
Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a low severity issue.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-34367?
CVE-2023-34367 is a vulnerability in Windows 7 that allows for a full blind TCP/IP hijacking attack.
Which versions of Windows are affected by CVE-2023-34367?
Windows 7 (any version until Windows 8) is affected by CVE-2023-34367.
What is the severity of CVE-2023-34367?
The vendor considers CVE-2023-34367 a low severity issue, but it is assigned a severity rating of 6.5.
How can CVE-2023-34367 be exploited?
CVE-2023-34367 can be exploited through a full blind TCP/IP hijacking attack.
Is there a fix for CVE-2023-34367?
There is no known fix for CVE-2023-34367, as Windows 7 is no longer supported by Microsoft.
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows 7