CVE-2022-34715 — Code Injection in Microsoft Windows Server 2022

CWE-94 — Code Injection12 documents7 sources
Severity
9.8CRITICALNVD
EPSS
38.9%
top 2.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Windows Server 2022Msrc Windows Server 2022
Timeline
PublishedAug 9
Latest updateNov 18

Description

Windows Network File System Remote Code Execution Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.887

🔴Vulnerability Details

1
GHSA
GHSA-cf8q-jcgr-5p7h: Windows Network File System Remote Code Execution Vulnerability↗2022-08-10
▶

📋Vendor Advisories

1
Microsoft
Windows Network File System Remote Code Execution Vulnerability↗2022-08-09
▶

🕵️Threat Intelligence

9
Securelist
IT threat evolution in Q3 2022. Non-mobile statistics↗2022-11-18
▶
Securelist
PC malware statistics, Q3 2022↗2022-11-18
▶
Trendmicro
Windows NFS v4 Remote Code Execution↗2022-09-06
▶
Trendmicro
Windows NFS v4 Remote Code Execution↗2022-09-06
▶
Trendmicro
Windows NFS v4 Remote Code Execution↗2022-09-06
▶