Lucene search

[email protected]CVE-2022-22017

HistoryMay 10, 2022 - 9:15 p.m.

CVE-2022-22017

2022-05-1021:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

205

cve-2022-22017

remote desktop client

remote code execution

vulnerability

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.017 Low

EPSS

Percentile

87.6%

JSON

Remote Desktop Client Remote Code Execution Vulnerability

VendorProductVersionCPE
microsoftremote_desktop*cpe:2.3:a:microsoft:remote_desktop:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	remote_desktop	*	cpe:2.3:a:microsoft:remote_desktop::::::::
microsoft	windows_server_2022	*	cpe:2.3:o:microsoft:windows_server_2022::::::::
microsoft	windows_11_21h2	*	cpe:2.3:o:microsoft:windows_11_21h2::::::::