Lucene search

K
mscveMicrosoftMS:CVE-2022-22001
HistoryFeb 08, 2022 - 8:00 a.m.

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

2022-02-0808:00:00
Microsoft
msrc.microsoft.com
27
windows
remote access
elevation
privilege
vulnerability
microsoft

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0

Percentile

9.5%

Affected configurations

Vulners
Node
microsoftwindows_server_2012Range<6.3.9600.20269r2
OR
microsoftwindows_server_2012Range<6.3.9600.20269r2
OR
microsoftwindows_server_2012Range<6.3.9600.20269r2
OR
microsoftwindows_server_2012Range<6.3.9600.20269r2
OR
microsoftwindows_server_2012Range<6.2.9200.23605
OR
microsoftwindows_server_2012Range<6.2.9200.23605
OR
microsoftwindows_server_2012Range<6.2.9200.23605
OR
microsoftwindows_server_2012Range<6.2.9200.23605
OR
microsoftwindows_rt_8.1Range<6.3.9600.20269
OR
microsoftwindows_8.1Range<6.3.9600.20269x64
OR
microsoftwindows_8.1Range<6.3.9600.20269x64
OR
microsoftwindows_8.1Range<6.3.9600.20269
OR
microsoftwindows_8.1Range<6.3.9600.20269
OR
microsoftwindows_server_2016Range<10.0.14393.4946
OR
microsoftwindows_server_2016Range<10.0.14393.4946
OR
microsoftwindows_10_1607Range<10.0.14393.4946x64
OR
microsoftwindows_10_1607Range<10.0.14393.4946
OR
microsoftwindows_10Range<10.0.10240.19204x64
OR
microsoftwindows_10Range<10.0.10240.19204
OR
microsoftwindows_10_21h2Range<10.0.19044.1526x64
OR
microsoftwindows_10_21h2Range<10.0.19044.1526arm64
OR
microsoftwindows_10_21h2Range<10.0.19044.1526
OR
microsoftwindows_11_21h2Range<10.0.22000.493arm64
OR
microsoftwindows_11_21h2Range<10.0.22000.493x64
OR
microsoftwindows_server_20h2Range<10.0.19042.1526
OR
microsoftwindows_10_20h2Range<10.0.19042.1526arm64
OR
microsoftwindows_10_20h2Range<10.0.19042.1526
OR
microsoftwindows_10_20h2Range<10.0.19042.1526x64
OR
microsoftwindows_server_2022Range<10.0.20348.524
OR
microsoftwindows_server_2022Range<10.0.20348.525
OR
microsoftwindows_server_2022Range<10.0.20348.524
OR
microsoftwindows_server_2022Range<10.0.20348.525
OR
microsoftwindows_10_21h1Range<10.0.19043.1526
OR
microsoftwindows_10_21h1Range<10.0.19043.1526arm64
OR
microsoftwindows_10_21h1Range<10.0.19043.1526x64
OR
microsoftwindows_10_1909Range<10.0.18363.2094
OR
microsoftwindows_10_1909Range<10.0.18363.2094
OR
microsoftwindows_10_1909Range<10.0.18363.2094
OR
microsoftwindows_server_2019Range<10.0.17763.2565
OR
microsoftwindows_server_2019Range<10.0.17763.2565
OR
microsoftwindows_10_1809Range<10.0.17763.2565arm64
OR
microsoftwindows_10_1809Range<10.0.17763.2565x64
OR
microsoftwindows_10_1809Range<10.0.17763.2565
VendorProductVersionCPE
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:r2:*:*:*:*:*:*
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
microsoftwindows_rt_8.1*cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
microsoftwindows_8.1*cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*
microsoftwindows_8.1*cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
microsoftwindows_10*cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:x64:*
microsoftwindows_10*cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 281

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0

Percentile

9.5%