CVE-2023-41771 - Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Published Oct 10, 2023

8.1

HIGH

CVSS 3.1

EPSS 1.26%

Description

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
unknown
Affected
- ≥ 10.0.10240.0, < 10.0.10240.20232
Vendor Microsoft Product Windows 10 Version 1607 Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.6351
Vendor Microsoft Product Windows 10 Version 1809 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.17763.4974
- ≥ 10.0.17763.0, < 10.0.17763.4974
Vendor Microsoft Product Windows 10 Version 21H2 Default
unknown
Affected
- ≥ 10.0.19043.0, < 10.0.19041.3570
Vendor Microsoft Product Windows 10 Version 22H2 Default
unknown
Affected
- ≥ 10.0.19045.0, < 10.0.19045.3570
Vendor Microsoft Product Windows 11 version 21H2 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.22000.2538
Vendor Microsoft Product Windows 11 version 22H2 Default
unknown
Affected
- ≥ 10.0.22621.0, < 10.0.22621.2428
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.22317
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.26769
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.26769
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.22317
Vendor Microsoft Product Windows Server 2008 Service Pack 2 (Server Core installation) Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.22317
Vendor Microsoft Product Windows Server 2012 Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.24523
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.24523
Vendor Microsoft Product Windows Server 2012 R2 Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.21620
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.21620
Vendor Microsoft Product Windows Server 2016 Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.6351
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.6351
Vendor Microsoft Product Windows Server 2019 Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.4974
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.4974
Vendor Microsoft Product Windows Server 2022 Default
unknown
Affected
- ≥ 10.0.20348.0, < 10.0.20348.2031

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows 10 Version 1507	unknown	Affected ≥ 10.0.10240.0, < 10.0.10240.20232
Microsoft	Windows 10 Version 1607	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.6351
Microsoft	Windows 10 Version 1809	unknown	Affected ≥ 10.0.0, < 10.0.17763.4974 ≥ 10.0.17763.0, < 10.0.17763.4974
Microsoft	Windows 10 Version 21H2	unknown	Affected ≥ 10.0.19043.0, < 10.0.19041.3570
Microsoft	Windows 10 Version 22H2	unknown	Affected ≥ 10.0.19045.0, < 10.0.19045.3570
Microsoft	Windows 11 version 21H2	unknown	Affected ≥ 10.0.0, < 10.0.22000.2538
Microsoft	Windows 11 version 22H2	unknown	Affected ≥ 10.0.22621.0, < 10.0.22621.2428
Microsoft	Windows Server 2008 Service Pack 2	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.22317
Microsoft	Windows Server 2008 R2 Service Pack 1	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.26769
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.26769
Microsoft	Windows Server 2008 Service Pack 2	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.22317
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.22317
Microsoft	Windows Server 2012	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.24523
Microsoft	Windows Server 2012 (Server Core installation)	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.24523
Microsoft	Windows Server 2012 R2	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.21620
Microsoft	Windows Server 2012 R2 (Server Core installation)	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.21620
Microsoft	Windows Server 2016	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.6351
Microsoft	Windows Server 2016 (Server Core installation)	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.6351
Microsoft	Windows Server 2019	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.4974
Microsoft	Windows Server 2019 (Server Core installation)	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.4974
Microsoft	Windows Server 2022	unknown	Affected ≥ 10.0.20348.0, < 10.0.20348.2031

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-362

Race Condition

CWE-416

Use After Free

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-46263
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41771
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-46263		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41771		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Oct 10, 2023

Updated Apr 14, 2025

Reserved Aug 31, 2023

Link CVE-2023-41771

CISA Vulnrichment

Updated Jul 10, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-41771

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Oct 10, 2023

Updated Apr 14, 2025

Link EUVD-2023-46263

GitHub

No data