Skip to content
Sign in
7.5 High

CVE-2023-29348 Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

Description

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Affected products and versions

Product Affected versions Fixed in
Windows Server 2019 10.0 10.0.17763.0 → < 10.0.17763.4974 10.0.17763.4974
Windows Server 2019 (Server Core installation) 10.0 10.0.17763.0 → < 10.0.17763.4974 10.0.17763.4974
Windows Server 2022 10.0 10.0.20348.0 → < 10.0.20348.2031 10.0.20348.2031
Windows Server 2016 10.0 10.0.14393.0 → < 10.0.14393.6351 10.0.14393.6351
Windows Server 2016 (Server Core installation) 10.0 10.0.14393.0 → < 10.0.14393.6351 10.0.14393.6351
Windows Server 2008 R2 Service Pack 1 6.1 6.1.7601.0 → < 6.1.7601.26769 6.1.7601.26769
Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1 6.1.7601.0 → < 6.1.7601.26769 6.1.7601.26769
Windows Server 2012 6.2 6.2.9200.0 → < 6.2.9200.24523 6.2.9200.24523
Windows Server 2012 (Server Core installation) 6.2 6.2.9200.0 → < 6.2.9200.24523 6.2.9200.24523
Show the 2 other branches
Product Affected versions Fixed in
Windows Server 2012 R2 6.3 6.3.9600.0 → < 6.3.9600.21620 6.3.9600.21620
Windows Server 2012 R2 (Server Core installation) 6.3 6.3.9600.0 → < 6.3.9600.21620 6.3.9600.21620

Other CVEs of Windows Server 2019

The 5745 CVEs of Windows Server 2019 →
CVE-2026-108136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.8 High CVE-2026-108471 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 8.8 High CVE-2026-108129 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network 6.5 Medium CVE-2026-108131 No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform… 7.5 High
Track this CVE