Summary
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.
Details
I am running a supported version of Windows Server. Is my system vulnerable to this issue?
This vulnerability is only exploitable for systems that have the NFS role enabled. See NFS Overview for more information on this feature. More information on installing or uninstalling Roles or Role Services is available here.
How could an attacker exploit this vulnerability?
An attacker could send a specially crafted NFS protocol network message to a vulnerable Windows machine, which could enable remote code execution.
Security updates
10.0.17763.2803 — https://support.microsoft.com/help/5012647
10.0.18363.2212 — https://support.microsoft.com/help/5012591
10.0.19043.1645 — https://support.microsoft.com/help/5012599
10.0.20348.643 — https://support.microsoft.com/help/5012604
10.0.22000.613 — https://support.microsoft.com/help/5012592
10.0.10240.19265 — https://support.microsoft.com/help/5012653
10.0.14393.5066 — https://support.microsoft.com/help/5012596
6.3.9600.20337 — https://support.microsoft.com/help/5012670
6.3.9600.20337 — https://support.microsoft.com/help/5012639
6.2.9200.23679 — https://support.microsoft.com/help/5012650
6.2.9200.23679 — https://support.microsoft.com/help/5012666
Vulnerabilities 1
-
Critical 9.8
Windows Network File System Remote Code Execution Vulnerability
Windows Network File System Remote Code Execution Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2022-24497 Windows Network File System Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24497
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss