VDB
CVE-2022-41079
CVE-2022-41079
PUBLISHED
Es existieren mehrere Schwachstellen in verschiedenen Versionen des Microsoft Exchange Servers, die noch nicht im Detail beschrieben sind. Ein entfernter authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern und Informationen falsch darzustellen.
EPSS 0.97% · 77.0th percentile
Risk Scores
EPSS Score
0.97%
77.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 | |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 12 | |
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 11 | |
| Microsoft | Microsoft Exchange Server 2013 Cumulative Update 23 | |
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 22 |
Exploit Intelligence
- https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
- https://www.crowdstrike.com/blog/owassrf-exploit-analysis-and-recommendations/ (certbund)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
- Invoke-AnalyzerSecurityCveCheck.ps1 (github-poc)
Timeline
- Nov 8, 2022 CVE Published
- Nov 10, 2022 EPSS Score
- Nov 13, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 4, 2023 EPSS Score
- Mar 19, 2023 EPSS Score
- May 1, 2023 EPSS Score
- Jun 13, 2023 EPSS Score
- Sep 7, 2023 EPSS Score
- Oct 20, 2023 EPSS Score
- Jan 14, 2024 EPSS Score
- Feb 26, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1980.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1980 advisory
- https://www.crowdstrike.com/blog/owassrf-exploit-analysis-and-recommendations/ exploit
- https://msrc.microsoft.com/update-guide advisory