CVE-2022-35802 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-35802 PUBLISHED CVSS 8.100000381469727 HIGH

Azure Site Recovery Elevation of Privilege Vulnerability

EPSS 13.58% · 94.2th percentile

Risk Scores

CVSS v3.1

8.100000381469727

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

EPSS Score

13.58%

94.2th percentile

Affected Products

Vendor	Product	Versions
microsoft	azure_site_recovery	9.0, 0
Microsoft	Azure Site Recovery VMWare to Azure	9.0

Timeline

Aug 9, 2022 CVE Published
Aug 10, 2022 EPSS Score
Sep 25, 2022 EPSS Score
Dec 25, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 26, 2023 EPSS Score
May 11, 2023 EPSS Score
Jun 25, 2023 EPSS Score
Sep 24, 2023 EPSS Score
Nov 9, 2023 EPSS Score
Dec 24, 2023 EPSS Score
Mar 25, 2024 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
Azure Site Recovery Elevation of Privilege Vulnerability vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-35802 advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35802 url

Open in Interactive Console →