Windows DNS Server Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition.
🎯 Affected products7
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server, version 20H2 (Server Core Installation)
✅ Remediation
KB5015811 (Security Update) — fixed build 10.0.17763.3165 KB5015827 (Security Update) — fixed build 10.0.20348.825 KB5015807 (Security Update) — fixed build 10.0.19042.1826 KB5015808 (Security Update) — fixed build 10.0.14393.5246
🔗 References (9)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30214
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015811
- referencehttps://support.microsoft.com/help/5015811
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015827
- referencehttps://support.microsoft.com/help/5015827
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015807
- referencehttps://support.microsoft.com/help/5015807
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015808
- referencehttps://support.microsoft.com/help/5015808