CVE-2023-21546

—

CVSS 3.1

8.1 high

EPSS

1%p64

Published

Jan 10, 2023 (Jan 10, 2023)

Modified

Jun 17, 2026

Description

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 20h2, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012
Weakness: CWE-591, CWE-362
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news2 stories

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+58 CVEs1

60

Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities

Cisco TalosJan 10, 20:28 UTC · Jan 10, 2023Vulnerability CVE-2023-21743 CVE-2023-21535 CVE-2023-21548+13 CVEs1

60