CVE-2023-21692 - CVE House

Back to Database

Status published Critical CVE-2023-21692

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

9.8 CVSS

Vulnerability Description

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-21692

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21692

More from Microsoft

View All →

Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

EOL ASP.NET Core Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Partner Center Elevation of Privilege Vulnerability

Affected Vendor

Microsoft

View all reports →

Affected Software

Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Vulnerable Versions:

10.0.17763.0, 10.0.0, 10.0.20348.0, 10.0.19043.0, 10.0.22621.0, 10.0.19045.0, 10.0.10240.0, 10.0.14393.0, 6.0.6003.0, 6.1.7601.0, 6.2.9200.0, 6.3.9600.0

Timeline

Official Publish: February 14th, 2023

Last Modified: January 1st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion