CVE-2021-1669

Summary

Windows Remote Desktop Security Feature Bypass Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows 10 Version 20H210.0.0 < publicationaffected
MicrosoftWindows Server version 20H210.0.0 < publicationaffected
MicrosoftWindows 10 Version 180310.0.0 < publicationaffected
MicrosoftWindows 10 Version 180910.0.0 < publicationaffected
MicrosoftWindows Server 201910.0.0 < publicationaffected
MicrosoftWindows 10 Version 190910.0.0 < publicationaffected
MicrosoftWindows Server, version 1909 (Server Core installation)10.0.0 < publicationaffected
MicrosoftWindows 10 Version 200410.0.0 < publicationaffected
MicrosoftWindows Server version 200410.0.0 < publicationaffected
MicrosoftWindows 10 Version 150710.0.0 < publicationaffected
MicrosoftWindows 10 Version 160710.0.0 < publicationaffected
MicrosoftWindows Server 201610.0.0 < publicationaffected
MicrosoftWindows Server 2016 (Server Core installation)10.0.0 < publicationaffected
MicrosoftMicrosoft Remote Desktop for Mac1.0.0 < publicationaffected
MicrosoftMicrosoft Remote Desktop for IoS1.0.0 < publicationaffected
MicrosoftRemote Desktop client for Windows Desktop1.2.0.0 < publicationaffected

Weaknesses

  • Security Feature Bypass

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References