Micropatches Released For DHCP Server Service Remote Code Execution (CVE-2023-28231)

 

April 2023 Windows Updates brought a fix for CVE-2023-28231,
a remote code execution vulnerability in DHCP Server service. The vulnerability was reported to Microsoft by security researcher YanZiShuang.

Subsequently, Numen Cyber published a POC and DarkRelay Security Labs published their analysis, both of which allowed us to reproduce the issue and create a
micropatch for Windows computers that haven't received an official fix
from Microsoft.

The vulnerability only affects Windows servers with DHCP Server installed, and resides …

analysis april code code execution cve cve-2023-28231 cyber dhcp fix issue labs microsoft poc remote code remote code execution researcher security security researcher server service updates vulnerability windows windows updates