Security Updates for Microsoft Azure Site Recovery (March 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2022-24471

Azure Site Recovery Remote Code Execution Vulnerability...

CVE-2022-24471 Azure Site Recovery Remote Code Execution Vulnerability

...

CVE-2022-24471

CVE-2022-24471 affects Microsoft Azure Site Recovery (VMware to Azure). It is described as a remote code execution vulnerability in Azure Site Recovery components, with a CVSSv3.1 base score of 7.2 (HIGH), NETWORK attack vector, LOW attack complexity, no user interaction, and required privileges ...