107 matches found
CVE-2022-44670
CVE-2022-44670 affects Windows SSTP and allows remote code execution via a race condition in the SSTP/RAS handshake. An unauthenticated attacker could send a crafted SSTP connection request to a RAS server to achieve RCE. Public details in connected sources describe exploit path and patch context...
CVE-2022-35794
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-35767
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-35766
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-34714
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-34701
Windows Secure Socket Tunneling Protocol SSTP Denial of Service Vulnerability...
CVE-2022-34702
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
Remote code execution
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
Remote code execution
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
Remote code execution
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
Remote code execution
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
Remote code execution
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
Denial of service
Windows Secure Socket Tunneling Protocol SSTP Denial of Service Vulnerability...
CVE-2022-35794 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2022-35794
CVE-2022-35794 refers to a Windows SSTP (Secure Socket Tunneling Protocol) Remote Code Execution vulnerability. The connected sources confirm a vulnerability in the SSTP/Remote Access stack that can enable RCE via a race condition. An unauthenticated attacker could trigger this by sending a craft...
CVE-2022-35794 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2022-35767
Technical details are not provided in the supplied connected documents for CVE-2022-35767. Public disclosure, affected products, exploit status, and fixes are not specified here; monitor for updates.
CVE-2022-35767 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2022-35766
CVE-2022-35766 is described in the connected CNNVD entry as a code injection vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) that can lead to remote code execution. The CNNVD note lists affected Windows releases (e.g., various Windows 10/11 and Windows Server versions) but do...