Question 1

What is CVE-2023-29411?

Accepted Answer

CVE-2023-29411 is a critical-severity software vulnerability (Missing authentication) with a CVSS score of 9.8. 
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow
changes to administrative credentials, leading to potential remote code execution without
requiring prior authentication on the Java RMI interfac

Question 2

Is CVE-2023-29411 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2023-29411 affect?

Accepted Answer

Tracked products affected include Windows 10/11, Windows Server 2022, Windows 11. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2023-29411?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2023-29411

Summary

Impact & exploitability

Affected products we track (3)

Recommendation

Additional information