Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this could bypass the Network Device Enrollment (NDES) Services' cryptographic service provider.
Security updates
10.0.17763.3406 — https://support.microsoft.com/help/5017315
10.0.20348.1006 — https://support.microsoft.com/help/5017316
10.0.20348.916 — https://support.microsoft.com/help/5017392
10.0.14393.5356 — https://support.microsoft.com/help/5017305
6.3.9600.20571 — https://support.microsoft.com/help/5017367
6.3.9600.20571 — https://support.microsoft.com/help/5017365
Vulnerabilities 1
-
Medium 6.5
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2022-37959 Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37959
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss