Security Updates for Microsoft Azure Site Recovery (March 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2022-24467

creationtimestamp| type| source ---|---|--- 2022-03-09 20:17:58+00:00| seen| https://t.me/cibsecurity/38596...

CVE-2022-24467

Azure Site Recovery Remote Code Execution Vulnerability...

CVE-2022-24467

CVE-2022-24467 corresponds to a remote code execution vulnerability in Microsoft Azure Site Recovery (VMware-to-Azure recovery). The Nessus plugin describes an RCE that can bypass authentication and allow an attacker to execute arbitrary commands on the remote host. Microsoft’s security guidance ...