CVE-2023-38148CriticalCVSS 8.8

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Published
September 12, 2023
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2023-38148 →

📋 Description

How could an attacker exploit this vulnerability? An unauthorized attacker could exploit this Internet Connection Sharing (ICS) vulnerability by sending a specially crafted network packet to the Internet Connection Sharing (ICS) Service.

According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability? This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.

🎯 Affected products12

  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 11 Version 22H2 for ARM64-based Systems
  • Windows 11 Version 22H2 for x64-based Systems
  • Windows 11 version 21H2 for ARM64-based Systems
  • Windows 11 version 21H2 for x64-based Systems
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

✅ Remediation

KB5030216 (Security Update) — fixed build 10.0.20348.1970 KB5030325 (AzureHotpatch) — fixed build 10.0.20348.1964 KB5030217 (Security Update) — fixed build 10.0.22000.2416 KB5030211 (Security Update) — fixed build 10.0.19044.3448 KB5030219 (Security Update) — fixed build 10.0.22621.2283 KB5030211 (Security Update) — fixed build 10.0.19045.3448

🔗 References (11)