CVE-2023-33167
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jul 11, 2023
Updated: May 29, 2024
CWE ID 126
Summary
CVE-2023-33167 is a newly identified denial-of-service vulnerability affecting the Remote Procedure Call (RPC) runtime. An unauthenticated attacker can exploit this weakness by sending maliciously crafted RPC messages, causing the system to consume excessive resources and crash. The vulnerability can lead to extended downtime and potential data loss. Users are encouraged to apply patches or updates to mitigate the risk of attack.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share