MSRC compact vulnerability detail

CVE-2023-29355 · DHCP Server Service Information Disclosure Vulnerability

No description was published by MSRC.

Severity
Important
Impact
Information Disclosure
CVSS
5.3 base · 4.6 temporal
Release
2023-06-13
Signals
Windows DHCP Server Information Disclosure Exploited: No Publicly disclosed: No Exploitability: Exploitation Less Likely
CWE
No CWE data published.
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Old version New version
Description
No description was published by MSRC.
FAQ / Articles
Mitigation
The following mitigating factors might be helpful in your situation: Customers who have not configured their DHCP server as a failover are not affected by this vulnerability.
FAQ
What type of information could be disclosed by this vulnerability? The attacker might be able to guess the DHCP server's IP addresses pool information, which would otherwise not be disclosed.