CVE-2021-1713

Description

Microsoft Excel Remote Code Execution Vulnerability

Risk Information

Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
5.319

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Word Remote Code Execution Vulnerability for Microsoft Office Web Apps Server 2013 (KB4493171)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2010 (KB4493186) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2010 (KB4493186) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2013 (KB4493176) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2013 (KB4493176) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2016 (KB4493165) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2016 (KB4493165) 64-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Office 2019 for x86 1808 of version(10370.20052)Windows
Microsoft Word Remote Code Execution Vulnerability for Office 2019 x64 1808 (Build:10370.20052)Windows
Microsoft Word Remote Code Execution Vulnerability for Office 2019 for x64 1808 of version(10370.20052)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x64 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x86 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2008 (Build 13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x64 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x86 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x64 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x86 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel Version 2012 (Build 13530.20376)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-30673Security Update for Microsoft Office Web Apps Server 2013 (KB4493171)
PATCH-30652Security Update for Microsoft Excel 2010 (KB4493186) 32-Bit Edition
PATCH-30653Security Update for Microsoft Excel 2010 (KB4493186) 64-Bit Edition
PATCH-30665Security Update for Microsoft Excel 2013 (KB4493176) 32-Bit Edition
PATCH-30666Security Update for Microsoft Excel 2013 (KB4493176) 64-Bit Edition
PATCH-30677Security Update for Microsoft Excel 2016 (KB4493165) 32-Bit Edition
PATCH-30678Security Update for Microsoft Excel 2016 (KB4493165) 64-Bit Edition
PATCH-30695Update for Office 2019 for x86 1808 of version(10370.20052)
PATCH-30696Office 2016 Deployment Tool for Office 2019 x64 1808 (Build:10370.20052)
PATCH-30697Update for Office 2019 for x64 1808 of version(10370.20052)
PATCH-30699Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2008 of version(13127.21064)
PATCH-30701Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2008 of version(13127.21064)
PATCH-30703Update for Microsoft 365 Apps for Business Semi Annual Channel for x64 2008 of version(13127.21064)
PATCH-30705Update for Microsoft 365 Apps for Business Semi Annual Channel for x86 2008 of version(13127.21064)
PATCH-30707Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.21064)
PATCH-30709Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.21064)
PATCH-30711Update for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2008 (Build 13127.21064)
PATCH-30712Update for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.21064)
PATCH-30687Update for Microsoft 365 Apps for Enterprise Current Channel for x64 2012 of version(13530.20376)
PATCH-30689Update for Microsoft 365 Apps for Enterprise Current Channel for x86 2012 of version(13530.20376)
PATCH-30691Update for Microsoft 365 Apps for Business Current Channel for x64 2012 of version(13530.20376)
PATCH-30693Update for Microsoft 365 Apps for Business Current Channel for x86 2012 of version(13530.20376)
PATCH-30710Update for Microsoft 365 Apps for Enterprise Current Channel Version 2012 (Build 13530.20376)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234