CVE-2022-35824 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-35824 PUBLISHED CVSS 7.199999809265137 HIGH

Azure Site Recovery Remote Code Execution Vulnerability

EPSS 18.45% · 95.2th percentile

Risk Scores

CVSS v3.1

7.199999809265137

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS Score

18.45%

95.2th percentile

Affected Products

Vendor	Product	Versions
microsoft	azure_site_recovery	9.0, 0
Microsoft	Azure Site Recovery VMWare to Azure	9.0

Timeline

Aug 9, 2022 CVE Published
Aug 10, 2022 EPSS Score
Sep 25, 2022 EPSS Score
Nov 9, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 26, 2023 EPSS Score
May 11, 2023 EPSS Score
Aug 10, 2023 EPSS Score
Nov 9, 2023 EPSS Score
Dec 24, 2023 EPSS Score
Mar 25, 2024 EPSS Score
Jun 24, 2024 EPSS Score

References

https://msrc.microsoft.com/update-guide/ advisory
Azure Site Recovery Remote Code Execution Vulnerability vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-35824 advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35824 url

Open in Interactive Console →