CVE-2017-8628

Description

Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 allows a spoofing vulnerability due to Microsofts implementation of the Bluetooth stack, aka Microsoft Bluetooth Driver Spoofing Vulnerability.

Risk Information

Base Score
8.0
MODERATE
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.736

Associated Vulnerability

VulnerabilityOS Platform
Windows Print Spooler Remote Code Execution Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4038792)Windows
Windows Print Spooler Remote Code Execution Vulnerability for Windows 8.1 for x64-based Systems (KB4038792)Windows
Windows Print Spooler Remote Code Execution Vulnerability for Windows 8.1 for x86-based Systems (KB4038792)Windows
Internet Explorer Spoofing Vulnerability for Windows 7 for x64-based Systems (KB4038777)Windows
Internet Explorer Spoofing Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4038777)Windows
Internet Explorer Spoofing Vulnerability for Windows 7 for x86-based Systems (KB4038777)Windows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB4038783) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1511 for x86-based Systems (KB4038783) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4038782) - DeltaWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4038782) - DeltaWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4038782) - DeltaWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4038781) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4038788) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4038788) - DeltaWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4038788) - CumulativeWindows
Internet Explorer Spoofing Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4038788) - DeltaWindows
Microsoft Bluetooth Driver Spoofing Vulnerability for the microsoft bluetooth driver spoofing vulnerability in Windows Server 2008 for x64-based Systems (KB4034786)Windows
Microsoft Bluetooth Driver Spoofing Vulnerability for the microsoft bluetooth driver spoofing vulnerability in Windows Server 2008 (KB4034786)Windows
Windows Explorer Denial of Service Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4025333)Windows
Windows Explorer Denial of Service Vulnerability for Windows 8.1 for x64-based Systems (KB4025333)Windows
Windows Explorer Denial of Service Vulnerability for Windows 8.1 for x86-based Systems (KB4025333)Windows
Windows Explorer Denial of Service Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4025337)Windows
Windows Explorer Denial of Service Vulnerability for Windows 7 for x64-based Systems (KB4025337)Windows
Windows Explorer Denial of Service Vulnerability for Windows 7 for x86-based Systems (KB4025337)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-229932017-09 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4038792)
PATCH-229922017-09 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4038792)
PATCH-229912017-09 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4038792)
PATCH-229892017-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4038777)
PATCH-229902017-09 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4038777)
PATCH-229882017-09 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4038777)
PATCH-23008Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4038783)
PATCH-23007Cumulative Update for Windows 10 Version 1511 for x86-based Systems (KB4038783)
PATCH-23011Cumulative Update for Windows Server 2016 for x64-based Systems (KB4038782)
PATCH-23014Delta Update for Windows Server 2016 for x64-based Systems (KB4038782)
PATCH-23010Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4038782)
PATCH-23013Delta Update for Windows 10 Version 1607 for x64-based Systems (KB4038782)
PATCH-23009Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4038782)
PATCH-23012Delta Update for Windows 10 Version 1607 for x86-based Systems (KB4038782)
PATCH-23006Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4038781)
PATCH-23114Security Update for Windows Server 2008 for x64-based Systems (KB4034786)
PATCH-23113Security Update for Windows Server 2008 (KB4034786)
PATCH-227732017-07 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB4025333)
PATCH-227722017-07 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4025333)
PATCH-227712017-07 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4025333)
PATCH-227672017-07 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4025337)
PATCH-227662017-07 Security Only Quality Update for Windows 7 for x64-based Systems (KB4025337)
PATCH-227652017-07 Security Only Quality Update for Windows 7 for x86-based Systems (KB4025337)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234