CVE-2021-1713MEDIUM
Description
Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1714.
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1713
Details
Source: MITRE
Published: 2021-01-12
Updated: 2021-02-24
Type: CWE-119
Risk Information
CVSS v2.0
Base Score: 6.8
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3.0
Base Score: 7.8
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1.8
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 144981 | Security Updates for Microsoft Office (January 2021) (macOS) | Nessus | MacOS X Local Security Checks | high |
| 144883 | Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (January 2021) | Nessus | Windows : Microsoft Bulletins | high |
| 144879 | Security Updates for Microsoft Excel Products (January 2021) | Nessus | Windows : Microsoft Bulletins | medium |