CVE-2022-35772 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-35772 PUBLISHED CVSS 7.199999809265137 HIGH

Azure Site Recovery Remote Code Execution Vulnerability

EPSS 1.77% · 82.5th percentile

Risk Scores

CVSS v3.1

7.199999809265137

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS Score

1.77%

82.5th percentile

Affected Products

Vendor	Product	Versions
microsoft	azure_site_recovery	9.0
microsoft	azure_site_recovery_vmware_to_azure	0
Microsoft	Azure Site Recovery VMWare to Azure	9.0

Timeline

Aug 9, 2022 CVE Published
Aug 10, 2022 EPSS Score
Aug 16, 2022 EPSS Score
Nov 9, 2022 EPSS Score
Dec 25, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Mar 26, 2023 EPSS Score
May 11, 2023 EPSS Score
Aug 10, 2023 EPSS Score
Sep 24, 2023 EPSS Score
Dec 24, 2023 EPSS Score
Feb 8, 2024 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
Azure Site Recovery Remote Code Execution Vulnerability vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-35772 advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35772 url

Open in Interactive Console →