CVE-2023-28244

HIGH

Windows Server 2008, 2012, 2016, 2019, 2022 - Elevation of Privilege via Kerberos

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-28244. PoCs published by sk3w.

AI-analyzed exploit summary This repository contains functional exploit code for CVE-2023-28244, which targets a Kerberos vulnerability allowing session key recovery from RC4-MD4 encrypted AS_REP messages. The PoC includes tools for brute-forcing keys, retrieving AS_REP messages, and proxying traffic.

Description

Windows Kerberos Elevation of Privilege Vulnerability

Exploits (1)

nomisec WORKING POC 2 stars
by sk3w · poc
https://github.com/sk3w/cve-2023-28244

This repository contains functional exploit code for CVE-2023-28244, which targets a Kerberos vulnerability allowing session key recovery from RC4-MD4 encrypted AS_REP messages. The PoC includes tools for brute-forcing keys, retrieving AS_REP messages, and proxying traffic.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Kerberos KDC (Key Distribution Center)
No auth needed
Prerequisites: Access to a vulnerable KDC · Valid username and realm
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 8.1
EPSS 0.0292
EPSS Percentile 85.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-327
Status published
Products (7)
microsoft/windows_server_2008
microsoft/windows_server_2008 r2 sp1
microsoft/windows_server_2012
microsoft/windows_server_2012 r2
microsoft/windows_server_2016
microsoft/windows_server_2019
microsoft/windows_server_2022
Published Apr 11, 2023
Tracked Since Feb 18, 2026