Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2021-28342
CVE-2021-28342:
vulnerability analysis and mitigation
Overview
The Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2021-28342) was identified and disclosed on March 12, 2021. This vulnerability affects multiple Microsoft Windows operating systems, including Windows 10, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and various Windows Server versions (MITRE CVE).
Technical details
The vulnerability has been assigned a CVSS v3.1 base score indicating high severity with the following vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This suggests the vulnerability is network accessible, requires low attack complexity, needs low privileges, requires no user interaction, and can result in high impacts to confidentiality, integrity, and availability. The CVSS v2 score was also assigned as (AV:N/AC:L/Au:S/C:P/I:P/A:P) (NVD).
Impact
The vulnerability could allow remote code execution if successfully exploited, potentially compromising the confidentiality, integrity, and availability of affected systems. The high severity ratings across all impact categories (confidentiality, integrity, and availability) indicate the potential for significant system compromise (NVD).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management