Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

CVE-2023-29348 · published 3 years ago
Summary

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

What to do
  • Update microsoft windows server 2019 to version 10.0.17763.4974 or later.
  • Update microsoft windows server 2019 (server core installation) to version 10.0.17763.4974 or later.
  • Update microsoft windows server 2022 to version 10.0.20348.2031 or later.
  • Update microsoft windows server 2016 to version 10.0.14393.6351 or later.
  • Update microsoft windows server 2016 (server core installation) to version 10.0.14393.6351 or later.
  • Update microsoft windows server 2008 r2 service pack 1 to version 6.1.7601.26769 or later.
  • Update microsoft windows server 2008 r2 service pack 1 (server core installation) to version 6.1.7601.26769 or later.
  • Update microsoft windows server 2012 to version 6.2.9200.24523 or later.
  • Update microsoft windows server 2012 (server core installation) to version 6.2.9200.24523 or later.
  • Update microsoft windows server 2012 r2 to version 6.3.9600.21620 or later.
  • Update microsoft windows server 2012 r2 (server core installation) to version 6.3.9600.21620 or later.
Affected software
VendorProductAffected versions
microsoft windows_server_2008 r2
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
microsoft windows_server_2012 r2
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
microsoft windows_server_2016 All versions
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
microsoft windows_server_2019 All versions
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
microsoft windows_server_2022 All versions
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
microsoft windows server 2019 < 10.0.17763.4974
microsoft windows server 2019 (server core installation) < 10.0.17763.4974
microsoft windows server 2022 < 10.0.20348.2031
microsoft windows server 2016 < 10.0.14393.6351
microsoft windows server 2016 (server core installation) < 10.0.14393.6351
microsoft windows server 2008 r2 service pack 1 < 6.1.7601.26769
microsoft windows server 2008 r2 service pack 1 (server core installation) < 6.1.7601.26769
microsoft windows server 2012 < 6.2.9200.24523
microsoft windows server 2012 (server core installation) < 6.2.9200.24523
microsoft windows server 2012 r2 < 6.3.9600.21620
microsoft windows server 2012 r2 (server core installation) < 6.3.9600.21620
Original advisory text
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published10 Oct 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-29348 · NVD
CVE-2023-29348 · MITRE
Track software like this
Free during beta