CVE-2021-28445: 
vulnerability analysis and mitigation

Windows Network File System Remote Code Execution Vulnerability (CVE-2021-28445) was disclosed on April 13, 2021. This vulnerability affects various versions of Microsoft Windows, including Windows 10, Windows 7 SP1, Windows 8.1, and Windows RT 8.1. The vulnerability received a CVSS v3.1 base score of 8.8 (HIGH) from NIST and 8.1 (HIGH) from Microsoft (NVD).

The vulnerability is characterized by its network attack vector (AV:N) with low attack complexity (AC:L) requiring low privileges (PR:L) and no user interaction (UI:N). It received different CVSS vector strings from NIST (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and Microsoft (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H), indicating high potential impact on confidentiality, integrity, and availability (NVD).

The vulnerability could allow an attacker to execute remote code on the targeted system. The attack does not require user interaction, making it particularly dangerous. With a CVSS score of 8.8, it represents a high-severity threat that could lead to significant system compromise (Talos).

The vulnerability requires low attack complexity and low privileges to exploit, making it relatively accessible to attackers. According to the technical details, no user interaction is required for exploitation, increasing its potential threat level (NVD).

Microsoft has released security updates to address this vulnerability. Users are strongly encouraged to apply the appropriate patches, which are available through Microsoft's security update system. Multiple KB updates have been released for different affected versions of Windows (Rapid7).