What is CVE-2023-32057?

CVE-2023-32057 is a critical remote code execution vulnerability in Microsoft Message Queuing (MSMQ) on various Windows operating systems, including Windows 10, Windows 11, and Windows Server versions. An attacker can exploit this vulnerability by sending a specially crafted malicious MSMQ packet to a server, resulting in unauthorized access and control over the affected system.

Who is impacted by CVE-2023-32057?

CVE-2023-32057 affects users of Microsoft Windows and Windows Server operating systems, including Windows 10, Windows 11, and various Windows Server versions. Specifically, it impacts Windows 10 versions 1507, 1607, 1809, 21H2, and 22H2; Windows 11 versions 21H2 and 22H2; and Windows Server versions 2008, 2008 R2, 2012, 2012 R2, 2016, 2019, and 2022. This vulnerability poses a significant risk of unauthorized access and control over affected systems.

What to do if CVE-2023-32057 affected you

If you're affected by the CVE-2023-32057 vulnerability, it's crucial to take action to protect your system. Follow these simple steps:

1. Disable the Windows message queuing service if it's not needed.

2. Check for a running "Message Queuing" service and if TCP port 1801 is listening on your machine.

3. Download and install the appropriate security update for your Windows version from the Microsoft Security Update Guide.

Is in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-32057 vulnerability, also known as the Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. This critical vulnerability affects various Windows operating systems and could allow an attacker to execute code remotely on a vulnerable system. To protect your system, it's essential to apply the patch provided by Microsoft.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-20, which involves improper input validation in Microsoft Message Queuing (MSMQ).

Learn More

For more information about the CVE-2023-32057 vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Microsoft Security Update Guide

• CVE Record