MSRC-CVE-2022-37980 — Windows DHCP Client Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
An authenticated attacker could leverage a specially crafted RPC call to the DHCP service to exploit this vulnerability.

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Security updates
10.0.19043.2130 — https://support.microsoft.com/help/5018410
10.0.20348.1129 — https://support.microsoft.com/help/5018421
10.0.22000.1098 — https://support.microsoft.com/help/5018418
10.0.22621.674 — https://support.microsoft.com/help/5018427

Vulnerabilities 1

High 7.8

CVE-2022-37980

Windows DHCP Client Elevation of Privilege Vulnerability

Windows DHCP Client Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 11 version 22H2 Windows

Oct 11, 2022

Revision history

2022-10-11 #1
Information published.

References

CVE-2022-37980 Windows DHCP Client Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37980
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss