CVE-2022-41039CriticalCVSS 8.1

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Published
November 8, 2022
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-41039 →

📋 Description

How could an attacker exploit this vulnerability? An unauthenticated attacker could send a specially crafted protocol message to a Routing and Remote Access Service (RRAS) server, which could lead to remote code execution (RCE) on the RAS server machine.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition.

🎯 Affected products39

  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1809 for ARM64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 20H2 for 32-bit Systems
  • Windows 10 Version 20H2 for ARM64-based Systems
  • Windows 10 Version 21H1 for 32-bit Systems
  • Windows 10 Version 21H1 for ARM64-based Systems
  • Windows 10 Version 21H1 for x64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 Version 22H2 for 32-bit Systems
  • Windows 10 Version 22H2 for ARM64-based Systems
  • Windows 10 Version 22H2 for x64-based Systems
  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 11 Version 22H2 for ARM64-based Systems
  • Windows 11 Version 22H2 for x64-based Systems
  • Windows 11 version 21H2 for ARM64-based Systems
  • Windows 11 version 21H2 for x64-based Systems
  • Windows 7 for 32-bit Systems Service Pack 1
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows 8.1 for 32-bit systems
  • Windows 8.1 for x64-based systems
  • Windows RT 8.1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2012
  • +9 more not shown

✅ Remediation

KB5019966 (Security Update) — fixed build 10.0.17763.3650 KB5019959 (Security Update) — fixed build 10.0.19043.2251 KB5019081 (Security Update) — fixed build 10.0.20348.1249 KB5019080 (Security Hotpatch Update) — fixed build 10.0.20348.1251 KB5019959 (Security Update) — fixed build 10.0.19042.2251 KB5019961 (Security Update) — fixed build 10.0.22000.1219 KB5019959 (Security Update) — fixed build 10.0.19044.2251 KB5019980 (Security Update) — fixed build 10.0.22621.819 KB5019959 (Security Update) — fixed build 10.0.19045.2251 KB5019970 (Security Update) — fixed build 10.0.10240.19567 KB5019964 (Security Update) — fixed build 10.0.14393.5501 KB5020000 (Monthly Rollup) — fixed build 6.1.7601.26221 KB5020013 (Security Only) — fixed build 6.1.7601.26221 KB5020023 (Monthly Rollup) — fixed build 6.3.9600.20671 KB5020010 (Security Only) — fixed build 6.3.9600.20670 KB5020009 (Monthly Rollup) — fixed build 6.2.9200.23968 KB5020003 (Security Only) — fixed build 6.2.9200.23968

🔗 References (28)