CVE-2022-21900HighCVSS 4.6

Windows Hyper-V Security Feature Bypass Vulnerability

Published
January 11, 2022
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-21900 →

📋 Description

What configurations or versions could be at risk from this vulnerability? This bypass could affect any Hyper-V configurations that are using Router Guard. What is the exposure if the vulnerability was bypassed? Certain packets that would normally be blocked or dropped could be processed. This could allow an attacker to bypass set policy, potentially influencing router paths.

🎯 Affected products22

  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1909 for x64-based Systems
  • Windows 10 Version 21H1 for x64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 for x64-based Systems
  • Windows 11 version 21H2 for x64-based Systems
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows 8.1 for x64-based systems
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2012
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2016
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)
  • Windows Server, version 20H2 (Server Core Installation)

✅ Remediation

KB5009557 (Security Update) — fixed build 10.0.17763.2452 KB5009545 (Security Update) — fixed build 10.0.18363.2037 KB5009543 (Security Update) — fixed build 10.0.19043.1466 KB5009555 (Security Update) — fixed build 10.0.20348.469 KB5009543 (Security Update) — fixed build 10.0.19042.1466 KB5009566 (Security Update) — fixed build 10.0.22000.434 KB5009543 (Security Update) — fixed build 10.0.19044.1466 KB5009585 (Security Update) — fixed build 10.0.10240.19177 KB5009546 (Security Update) — fixed build 10.0.14393.4886 KB5009610 (Monthly Rollup) — fixed build 6.1.7601.25829 KB5009621 (Security Only) — fixed build 6.1.7601.25829 KB5009624 (Monthly Rollup) — fixed build 6.3.9600.20246 KB5009595 (Security Only) — fixed build 6.3.9600.20246 KB5009586 (Monthly Rollup) — fixed build 6.2.9200.23584 KB5009619 (Security Only) — fixed build 6.2.9200.23584

🔗 References (27)