CVE-2023-35329

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jul 11, 2023
Updated: May 29, 2024
CWE ID 400

Summary

CVE-2023-35329 is a newly disclosed Windows Authentication Denial of Service (DoS) vulnerability. Cybercriminals can exploit this issue by sending specially crafted requests to a targeted Windows system, leading to a denial of service condition. The flaw is related to the way Windows handles authentication requests, causing the system to consume excessive CPU resources and crash. This DoS vulnerability poses a serious threat to organizations relying on Windows servers, potentially disrupting their services and causing significant downtime. Mitigation measures include implementing firewalls to block malicious traffic and applying the latest Microsoft security updates.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share