CVE-2023-28219
Published: 11 April 2023
Summary
CVE-2023-28219 is a high-severity Sensitive Data Storage in Improperly Locked Memory (CWE-591) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.1 (High).
Operationally, ranked in the top 8.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-28219 is a remote code execution vulnerability in the Layer 2 Tunneling Protocol, carrying a CVSS 3.1 score of 8.1 with network attack vector, high attack complexity, and no requirements for privileges or user interaction. The flaw affects the L2TP implementation and is tracked under CWE-591.
An unauthenticated remote attacker can exploit the issue over the network to achieve arbitrary code execution with full impact on confidentiality, integrity, and availability, although successful exploitation requires conditions that elevate attack complexity.
Microsoft Security Response Center advisories at the referenced URLs describe available security updates that address the vulnerability and recommend applying the patches through standard Windows update channels.
EPSS for the CVE rose from a low baseline to a recorded peak of 0.0978 before settling at the current value of 0.0673, indicating emerging post-disclosure exploitation interest that warrants renewed attention.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-31927
Vulnerability details
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.