PT-2022-2244

CVE-2022-24491

Published

2022-02-05

Updated

2023-06-29

Description by

CVSS 3.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to incorrect code generation management in the Network File System (NFS) of Microsoft Windows. It allows a remote attacker to execute arbitrary code using a specially crafted NFS protocol network message. The vulnerability can be exploited by remote attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Liubenjin

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Related identifiers

CVE-2022-24491