CVE-2021-1691: 
vulnerability analysis and mitigation

A Windows Hyper-V Denial of Service vulnerability was identified and tracked as CVE-2021-1691. The vulnerability was initially disclosed on January 12, 2021, affecting multiple versions of Microsoft Windows 10 (versions 20H2, 1909, 2004) and Windows Server 2016 (versions 20H2, 1909, 2004) (NVD Database).

The vulnerability received a CVSS v3.1 base score of 7.7 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H, indicating network accessibility with low attack complexity and requiring low privileges. Under CVSS v2.0, it received a base score of 4.0 (MEDIUM) with vector (AV:N/AC:L/Au:S/C:N/I:N/A:P) (NVD Database).

This vulnerability specifically affects the availability of Windows Hyper-V services, potentially leading to denial of service conditions in affected systems. The CVSS scoring indicates high impact on system availability while maintaining confidentiality and integrity (NVD Database).

According to security assessments, there were no known exploits of this vulnerability in the wild at the time of disclosure (SonicWall Blog).

Microsoft addressed this vulnerability through security updates released in their January 2021 security patch cycle. Users of affected systems were advised to apply the relevant security updates to mitigate the risk (MSRC Update).