{"id":"CVE-2023-21803","state":"PUBLISHED","title":"Windows iSCSI Discovery Service Remote Code Execution Vulnerability","description":"Windows iSCSI Discovery Service Remote Code Execution Vulnerability","publishedAt":"2023-02-14T19:33:08.749Z","updatedAt":"2026-08-19T16:26:50.309Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Windows 10 Version 1507","Microsoft Windows 10 Version 1607","Microsoft Windows 10 Version 1809","Microsoft Windows 10 Version 20H2","Microsoft Windows 10 Version 21H2","Microsoft Windows 10 Version 22H2","Microsoft Windows Server 2008 Service Pack 2","Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)"],"affected":[{"vendor":"Microsoft","product":"Windows 10 Version 1507","versions":[{"version":"10.0.10240.0","status":"affected","lessThan":"10.0.10240.19747","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 1607","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.5717","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 1809","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.4010","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 20H2","versions":[{"version":"10.0.0","status":"affected","lessThan":"10.0.19042.2604","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 21H2","versions":[{"version":"10.0.19043.0","status":"affected","lessThan":"10.0.19044.2604","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 22H2","versions":[{"version":"10.0.19045.0","status":"affected","lessThan":"10.0.19045.2604","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows Server 2008 Service Pack 2","versions":[{"version":"6.0.6003.0","status":"affected","lessThan":"6.0.6003.21915","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows Server 2008 Service Pack 2 (Server Core installation)","versions":[{"version":"6.0.6003.0","status":"affected","lessThan":"6.0.6003.21915","versionType":"custom"}],"platforms":["32-bit Systems"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803"],"weaknesses":["CWE-190"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/21xxx/CVE-2023-21803.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-21803","state":"PUBLISHED","datePublished":"2023-02-14T19:33:08.749Z","dateUpdated":"2026-08-19T16:26:50.309Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2022-12-16T22:13:41.240Z"},"containers":{"cna":{"title":"Windows iSCSI Discovery Service Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Windows iSCSI Discovery Service Remote Code Execution Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Windows 10 Version 1507","versions":[{"version":"10.0.10240.0","status":"affected","lessThan":"10.0.10240.19747","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 1607","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.5717","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 1809","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.4010","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 20H2","versions":[{"version":"10.0.0","status":"affected","lessThan":"10.0.19042.2604","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 21H2","versions":[{"version":"10.0.19043.0","status":"affected","lessThan":"10.0.19044.2604","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 22H2","versions":[{"version":"10.0.19045.0","status":"affected","lessThan":"10.0.19045.2604","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows Server 2008 Service Pack 2","versions":[{"version":"6.0.6003.0","status":"affected","lessThan":"6.0.6003.21915","versionType":"custom"}],"platforms":["32-bit Systems"]},{"vendor":"Microsoft","product":"Windows Server 2008 Service Pack 2 (Server Core installation)","versions":[{"version":"6.0.6003.0","status":"affected","lessThan":"6.0.6003.21915","versionType":"custom"}],"platforms":["32-bit Systems"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803","name":"Windows iSCSI Discovery Service Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-190","description":"CWE-190: Integer Overflow or Wraparound","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-08-19T16:26:50.309Z"},"datePublic":"2023-02-14T08:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.4010"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.19042.2604"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19043.0","versionEndExcluding":"10.0.19044.2604"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19045.0","versionEndExcluding":"10.0.19045.2604"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.10240.0","versionEndExcluding":"10.0.10240.19747"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.5717"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","versionStartIncluding":"6.0.6003.0","versionEndExcluding":"6.0.6003.21915"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","versionStartIncluding":"6.0.6003.0","versionEndExcluding":"6.0.6003.21915"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-23T18:48:13.868553Z","id":"CVE-2023-21803","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-23T18:48:18.471Z"}},{"title":"CVE Program Container","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803","name":"Windows iSCSI Discovery Service Remote Code Execution Vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T09:51:50.915Z"}}]}}}