CVE-2022-35781 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-35781 PUBLISHED CVSS 6.5 MEDIUM

Azure Site Recovery Elevation of Privilege Vulnerability

EPSS 2.85% · 86.1th percentile

Risk Scores

CVSS v3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C

EPSS Score

2.85%

86.1th percentile

Affected Products

Vendor	Product	Versions
microsoft	azure_site_recovery	9.0
Microsoft	Azure Site Recovery VMWare to Azure	9.0
microsoft	azure_site_recovery_vmware_to_azure	0

Timeline

Aug 9, 2022 CVE Published
Aug 10, 2022 EPSS Score
Sep 25, 2022 EPSS Score
Nov 9, 2022 EPSS Score
Dec 25, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 26, 2023 EPSS Score
May 11, 2023 EPSS Score
Jun 25, 2023 EPSS Score
Aug 10, 2023 EPSS Score
Sep 24, 2023 EPSS Score
Nov 9, 2023 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
Azure Site Recovery Elevation of Privilege Vulnerability vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-35781 advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35781 url

Open in Interactive Console →