Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-37959 EUVD-2022-40566GHSA-8x3j-26v3-4379

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

Published Sep 13, 2022 · Updated Nov 3, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows Server 2012 R2 Product: Windows Server 2012 R2 (Server Core installation) Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server 2022 Platform: Windows

Description

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Windows Server 2019 10.0.17763.0 – < 10.0.17763.3406 10.0.17763.3406
Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.0 – < 10.0.17763.3406 10.0.17763.3406
Microsoft Windows Server 2022 10.0.20348.0 – < 10.0.20348.1006 10.0.20348.1006
Microsoft Windows Server 2016 10.0.14393.0 – < 10.0.14393.5356 10.0.14393.5356
Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.0 – < 10.0.14393.5356 10.0.14393.5356
Microsoft Windows Server 2012 R2 6.3.9600.0 – < 6.3.9600.20571 6.3.9600.20571
Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.0 – < 6.3.9600.20571 6.3.9600.20571

Advisories 1

References