CVE-2023-36873HighCVSS 7.4

.NET Framework Spoofing Vulnerability

Published
August 8, 2023
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2023-36873 →

📋 Description

faq

arial

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to create a crafted certificate in order to validate themselves as a trusted source.

🎯 Affected products57

  • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016
  • Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019
  • Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022
  • Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation)
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems
  • Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems
  • +27 more not shown

✅ Remediation

KB5028952 (Security Update) — fixed build 4.8.4654.06 KB5028952 (Security Update) — fixed build 4.8.04654.06 KB5029651 (Monthly Rollup) — fixed build 4.8.4654.06 KB5029566 (Security Only) — fixed build 4.8.04654.05 KB5029652 (Monthly Rollup) — fixed build 4.8.04654.06 KB5029567 (Security Only) — fixed build 4.8.04654.05 KB5029653 (Monthly Rollup) — fixed build 4.8.04654.08 KB5029568 (Security Only) — fixed build 4.8.04654.07 KB5029647 (Security Update) — fixed build 3.5.4654.08 KB5029647 (Security Update) — fixed build 4.8.04654.08 KB5029655 (Security Update) — fixed build 4.8.04654.06 KB5029650 (Security Update) — fixed build 4.8.04654.06 KB5029648 (Security Update) — fixed build 4.8.04654.06 KB5029649 (Security Update) — fixed build 4.8.04654.06 KB5029647 (Security Update) — fixed build 3.5.04057.05 KB5029647 (Security Update) — fixed build 4.7.4057.05 KB5029242 (Security Update) — fixed build 10.0.14393.6167 KB5029651 (Monthly Rollup) — fixed build 4.7.04057.05 KB5029566 (Security Only) — fixed build 4.7.4057.04 KB5029652 (Monthly Rollup) — fixed build 4.7.04057.05 KB5029567 (Security Only) — fixed build 4.7.04057.04 KB5029653 (Monthly Rollup) — fixed build 4.7.04057.07 KB5029568 (Security Only) — fixed build 4.7.04057.06 KB5029655 (Security Update) — fixed build 3.5.09176.01 KB5029650 (Security Update) — fixed build 4.8.09176.01 KB5029648 (Security Update) — fixed build 4.8.09176.01 KB5028948 (Security Update) — fixed build 4.8.09176.01 KB5029649 (Security Update) — fixed build 4.8.09176.01 KB5029654 (Monthly Rollup) — fixed build 4.7.04057.05 KB5029569 (Security Only) — fixed build 4.7.4057.04 KB5029569 (Security Only) — fixed build 4.7.04057.04 KB5029259 (Security Update) — fixed build 10.0.10240.20107

🔗 References (42)