What is CVE-2023-29348?

CVE-2023-29348 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

Which CVE IDs does CVE-2023-29348 cover?

CVE-2023-29348 covers the following CVE IDs: CVE-2023-29348. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-29348?

CVE-2023-29348 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-29348?

CVE-2023-29348 affects 12 products, including: Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; and others — see the full list on the advisory page.

CVE-2023-29348HighCVSS 7.5

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 10, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-29348 →

📋 Description

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is remote heap memory.

🎯 Affected products12

Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)

✅ Remediation

KB5031361 (Security Update) — fixed build 10.0.17763.4974 KB5031364 (Security Update) — fixed build 10.0.20348.2031 KB5031362 (Security Update) — fixed build 10.0.14393.6351 KB5031408 (Monthly Rollup) — fixed build 6.1.7601.26769 KB5031441 (Security Only) — fixed build 6.1.7601.26769 KB5031442 (Monthly Rollup) — fixed build 6.2.9200.24523 KB5031427 (Security Only) — fixed build 6.2.9200.24523 KB5031419 (Monthly Rollup) — fixed build 6.3.9600.21620 KB5031407 (Security Only) — fixed build 6.3.9600.21620

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products12

✅ Remediation

🔗 References (22)