Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12477
HistoryMar 08, 2022 - 12:00 a.m.

KLA12477 Multiple vulnerabilities in Microsoft Azure

2022-03-0800:00:00
Kaspersky Lab
threats.kaspersky.com
51

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.8%

JSON

Detect date:

03/08/2022

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges.

Affected products:

Azure Site Recovery VMWare to Azure

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2022-24517
CVE-2022-24520
CVE-2022-24471
CVE-2022-24518
CVE-2022-24468
CVE-2022-24515
CVE-2022-24506
CVE-2022-24470
CVE-2022-24467
CVE-2022-24519
CVE-2022-24469

Impacts:

ACE

Related products:

Microsoft Azure

Related

nessus 1
prion 11
mscve 11
cnvd 11
cve 11
qualysblog 1
rapid7blog 1
nessus
nessus
Security Updates for Microsoft Azure Site Recovery (March 2022)
2022-08-30 00:00:00
prion
prion
Remote code execution
2022-03-09 17:15:00
Remote code execution
2022-03-09 17:15:00
Remote code execution
2022-03-09 17:15:00
mscve
mscve
Azure Site Recovery Elevation of Privilege Vulnerability
2022-03-08 08:00:00
Azure Site Recovery Remote Code Execution Vulnerability
2022-03-08 08:00:00
Azure Site Recovery Remote Code Execution Vulnerability
2022-03-08 08:00:00
cnvd
cnvd
Microsoft Azure Site Recovery Privilege Permission and Access Control Issue Vulnerability (CNVD-2022-18000)
2022-03-09 00:00:00
Microsoft Azure Site Recovery Code Injection Vulnerability (CNVD-2022-18002)
2022-03-09 00:00:00
Microsoft Azure Site Recovery Permissions Licensing and Access Control Issues Vulnerability (CNVD-2022-17999)
2022-03-09 00:00:00
cve
cve
CVE-2022-24519
2022-03-09 17:15:00
CVE-2022-24467
2022-03-09 17:15:00
CVE-2022-24469
2022-03-09 17:15:00
qualysblog
qualysblog
March 2022 Patch Tuesday: Microsoft Releases 92 Vulnerabilities with 3 Critical; Adobe Releases 3 Advisories, 6 Vulnerabilities with 5 Critical.
2022-03-08 22:20:59
rapid7blog
rapid7blog
Patch Tuesday - March 2022
2022-03-08 21:08:35

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.8%

JSON
Related for KLA12477
nessus1prion11mscve11cnvd11cve11qualysblog1rapid7blog1