Back to feed
EUVD-2015-1846 · Published May 13, 2015
Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict Diffie-Hellman Ephemeral (DHE) key lengths, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, aka "Schannel Information Disclosure Vulnerability."
Technologies
Microsoft Windows Rt 8.1Microsoft Windows 7Microsoft Windows VistaMicrosoft Windows Server 2003Microsoft Windows Server 2008Microsoft Windows RtMicrosoft Windows 8Microsoft Windows Server 2012Microsoft Windows 8.1
Weaknesses
CWE-200
CVSS scores
- v2.05.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
