Microsoft Windows TCP/IP Remote Code Execution Vulnerability (CNVD-2022-63613)

2022-09-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

JSON

Microsoft Windows TCP/IP component is a component of Microsoft Corporation (USA) that provides TCP/IP configuration functionality for Windows.A security vulnerability exists in Microsoft Windows TCP/IP. An unauthenticated attacker could send specially crafted IPv6 packets to a host running Windows with IPSec services enabled, allowing remote execution of arbitrary code on the target host.