CVE-2022-29129
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published May 10, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-29129 is a remote code execution vulnerability affecting Windows Lightweight Directory Access Protocol (LDAP). Maliciously crafted LDAP messages can be used to exploit this issue, resulting in an adversary gaining the ability to execute arbitrary code on the target system. Successful exploitation could lead to significant security implications, including data theft, system compromise, or unauthorized access. It is strongly recommended that affected systems are promptly patched to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft