Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What version of Microsoft Defender for IoT has the update that protects from this vulnerability?
Version 22.1.2 and above.
You need to update to the latest Microsoft Defender for IoT software version. See the Update the software version section of Manage the on-premises management console.
Microsoft Defender for IoT is a unified security solution for identifying IoT/OT devices, vulnerabilities, and threats. It enables you to secure your entire IoT/OT environment, whether you need to protect existing IoT/OT devices or build security into new IoT innovations. See Microsoft Defender for IoT for more information.
Security updates
22.1.2 — https://docs.microsoft.com/en-us/azure/defender-for-iot/organizations/release-notes#march-2022
Vulnerabilities 1
-
High 7.8
Microsoft Defender for IoT Elevation of Privilege Vulnerability
Microsoft Defender for IoT Elevation of Privilege Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2022-23266 Microsoft Defender for IoT Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23266
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss