Skip to content
OpenAdvisories
High MSRC-CVE-2022-23285 1 CVE

Remote Desktop Client Remote Code Execution Vulnerability

Published Mar 8, 2022 · Updated Mar 16, 2022 · Revision 2

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
In the case of a Remote Desktop connection, an attacker with control of a Remote Desktop Server could trigger a remote code execution (RCE) on the RDP client machine when a victim connects to the attacking server with the vulnerable Remote Desktop Client.

Security updates
10.0.17763.2686 — https://support.microsoft.com/help/5011503
10.0.18363.2158 — https://support.microsoft.com/help/5011485
10.0.19043.1586 — https://support.microsoft.com/help/5011487
10.0.20348.587 — https://support.microsoft.com/help/5011497
10.0.20348.580 — https://support.microsoft.com/help/5011580
10.0.10240.19235 — https://support.microsoft.com/help/5011491
10.0.14393.5006 — https://support.microsoft.com/help/5011495
6.1.7601.25898 — https://support.microsoft.com/help/5011552
6.1.7601.25898 — https://support.microsoft.com/help/5011529
6.3.9600.20303 — https://support.microsoft.com/help/5011564
6.3.9600.20303 — https://support.microsoft.com/help/5011560
6.3.9600.20296 — https://support.microsoft.com/help/5010419
6.2.9200.23645 — https://support.microsoft.com/help/5011535
6.2.9200.23639 — https://support.microsoft.com/help/5011527

Vulnerabilities 1

Revision history

  1. #2

    Corrected Download and Article links in the Security Updates table. This is an informational change only.

  2. #1

    Information published.

References