CVE-2021-1658: 
vulnerability analysis and mitigation

CVE-2021-1658 is a Remote Procedure Call Runtime Remote Code Execution Vulnerability affecting Microsoft Windows systems. The vulnerability was discovered and reported to Microsoft in December 2020, with the official disclosure and patch release occurring on January 12, 2021 (NVD).

The vulnerability received a CVSS v3.1 base score of 8.8 (High), with the following vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs low privileges, and can result in high impacts to confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute remote code on affected systems, potentially compromising the confidentiality, integrity, and availability of the system. The vulnerability affects multiple versions of Microsoft Windows, including Windows 10, Windows Server 2016, Windows Server 2019, and earlier versions (Rapid7).

The vulnerability requires network access and low privileges for exploitation. It is unique from several other Remote Procedure Call vulnerabilities (CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700, CVE-2021-1701) (Rapid7).

Microsoft has released security updates to address this vulnerability. Multiple patches are available for different versions of Windows, including KB4598229, KB4598230, KB4598231, KB4598242, KB4598243, KB4598245, KB4598275, and KB4598297 (Rapid7).