CVE-2023-35314

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jul 11, 2023
Updated: May 29, 2024
CWE ID 125

Summary

CVE-2023-35314 is a newly disclosed Denial of Service (DoS) vulnerability affecting the Remote Procedure Call (RPC) runtime. Hackers can exploit this weakness by sending specially crafted RPC messages to targeted systems, causing the RPC endpoint to crash and rendering the affected service unavailable. The vulnerability could potentially allow an attacker to cause widespread disruption to networks and applications that rely on RPC for communication. Mitigation strategies include applying available patches, implementing access control measures, and configuring firewalls to block malicious RPC traffic. System administrators are urged to prioritize remediation efforts to prevent potential service outages and protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share