VDB
CVE-2022-32230
CVE-2022-32230
PUBLISHED
CVSS 5.5 MEDIUM
De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft Windows</span>. Elles permettent à un attaquant de provoquer une usurpation d'identité, une élévation de privilèges, un contournement de la fonctionnalité de sécurité, une exécution de code à distance, une atteinte à la confidentialité des données et un déni de service.
EPSS 31.16% · 96.9th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
31.16%
96.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Intel(R) Processors | See references |
| Microsoft | Windows |
Exploit Intelligence
- https://github.com/zeroSteiner/metasploit-framework/blob/feat/mod/cve-2022-32230/modules/auxiliary/dos/smb/smb_filenormalizednameinformation.rb (nist-nvd)
- https://www.rapid7.com/blog/post/2022/06/14/cve-2022-32230-windows-smb-denial-of-service-vulnerability-fixed/ (nist-nvd)
- DSA-5173 (circl)
- DSA-5178 (circl)
- DSA-5184 (circl)
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html (circl)
- [oss-security] 20220616 Xen Security Advisory 404 v2 (CVE-2022-21123,CVE-2022-21125,CVE-2022-21166) - x86: MMIO Stale Data vulnerabilities (circl)
- FEDORA-2022-391e24517d (circl)
- FEDORA-2022-177a008b98 (circl)
- https://security.netapp.com/advisory/ntap-20220624-0008/ (circl)
…and 92 more exploits
Timeline
- Apr 22, 2022 PoC Published
- Jun 14, 2022 CVE Published
- Jun 15, 2022 EPSS Score
- Jun 24, 2022 EPSS Score
- Sep 20, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 18, 2023 EPSS Score
- Jul 6, 2023 EPSS Score
- Oct 10, 2023 EPSS Score
- Nov 27, 2023 EPSS Score
References
- https://msrc.microsoft.com/update-guide/ advisory
- DSA-5173 vendor-advisory
- DSA-5178 vendor-advisory
- DSA-5184 vendor-advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html url
- [oss-security] 20220616 Xen Security Advisory 404 v2 (CVE-2022-21123,CVE-2022-21125,CVE-2022-21166) - x86: MMIO Stale Data vulnerabilities mailing-list
- FEDORA-2022-391e24517d vendor-advisory
- FEDORA-2022-177a008b98 vendor-advisory
- https://security.netapp.com/advisory/ntap-20220624-0008/ url
- FEDORA-2022-925fc688c1 vendor-advisory
- [debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update mailing-list
- FEDORA-2022-2c9f8224f8 vendor-advisory
- GLSA-202208-23 vendor-advisory