CVE-2021-26431

Description

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Risk Information

Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
0.385

Associated Vulnerability

VulnerabilityOS Platform
Windows TCP/IP Remote Code Execution Vulnerability for Windows Server, version 2004 for x64-based Systems (KB5005033)Windows
Windows TCP/IP Remote Code Execution Vulnerability for Windows 10 Version 2004 for x64-based Systems (KB5005033)Windows
Windows TCP/IP Remote Code Execution Vulnerability for Windows 10 Version 2004 for x86-based Systems (KB5005033)Windows
Windows TCP/IP Remote Code Execution Vulnerability for Windows 10 Version 20H2 for x86-based Systems (KB5005033)Windows
Windows TCP/IP Remote Code Execution Vulnerability for Windows 10 Version 20H2 for x64-based Systems (KB5005033)Windows
Windows TCP/IP Remote Code Execution Vulnerability for Windows 10 Version 21H1 for x64-based Systems (KB5005033)Windows
Windows TCP/IP Remote Code Execution Vulnerability for Windows 10 Version 21H1 for x86-based Systems (KB5005033)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-319062021-08 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5005033) (CVE-2021-36936) (CVE-2021-36942) (CVE-2021-36948)
PATCH-319072021-08 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5005033) (CVE-2021-36936) (CVE-2021-36942) (CVE-2021-36948)
PATCH-319082021-08 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB5005033) (CVE-2021-36936) (CVE-2021-36942) (CVE-2021-36948)
PATCH-319092021-08 Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5005033) (CVE-2021-36936) (CVE-2021-36942) (CVE-2021-36948)
PATCH-319112021-08 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB5005033) (CVE-2021-36936) (CVE-2021-36942) (CVE-2021-36948)
PATCH-319122021-08 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5005033) (CVE-2021-36936) (CVE-2021-36942) (CVE-2021-36948)
PATCH-319132021-08 Cumulative Update for Windows 10 Version 21H1 for x86-based Systems (KB5005033) (CVE-2021-36936) (CVE-2021-36942) (CVE-2021-36948)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234