CVE-2022-35818 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-35818 PUBLISHED CVSS 6.5 MEDIUM

Azure Site Recovery Elevation of Privilege Vulnerability

EPSS 5.98% · 90.6th percentile

Risk Scores

CVSS v3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C

EPSS Score

5.98%

90.6th percentile

Affected Products

Vendor	Product	Versions
Microsoft	Azure Site Recovery VMWare to Azure	9.0
microsoft	azure_site_recovery	9.0, 0

Timeline

Aug 9, 2022 CVE Published
Aug 10, 2022 EPSS Score
Sep 25, 2022 EPSS Score
Nov 9, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 26, 2023 EPSS Score
May 11, 2023 EPSS Score
Aug 10, 2023 EPSS Score
Sep 24, 2023 EPSS Score
Nov 9, 2023 EPSS Score
Dec 24, 2023 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
Azure Site Recovery Elevation of Privilege Vulnerability vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-35818 advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35818 url

Open in Interactive Console →