CVE-2023-28231
Published: 11 April 2023
Summary
CVE-2023-28231 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 1.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-28231 is a remote code execution vulnerability in the DHCP Server Service, assigned a CVSS 3.1 score of 8.8 with an attack vector of adjacent network access. The affected component is the DHCP server functionality in supported Windows Server releases, and the weakness is categorized under CWE-122.
An unauthenticated attacker positioned on the same network segment can send specially crafted DHCP messages to trigger the flaw, achieving arbitrary code execution that grants full control over confidentiality, integrity, and availability of the target system.
Microsoft publishes mitigation details and patches through its Security Response Center at the referenced advisory URL. The associated EPSS score has remained elevated, with a current value of 0.7516 and a recorded peak of 0.7656.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-31939
Vulnerability details
DHCP Server Service Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.