PT-2023-5093

CVE-2023-38152

Published

2023-09-12

Updated

2024-05-29

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to an information disclosure vulnerability in the DHCP server service of Windows operating systems. It allows a remote attacker to disclose protected information. The vulnerability can be exploited by attackers to obtain sensitive information and potentially affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Yanzishuang

Vendors

Affected products

Weakness enumeration

CWE-668: Exposure of Resource to Wrong Sphere

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-126: Buffer Over-read

Related identifiers

CVE-2023-38152