CVE-2022-29141
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2022-29141 is a remote code execution vulnerability affecting Windows Lightweight Directory Access Protocol (LDAP). An attacker can exploit this issue by sending maliciously crafted LDAP messages to a targeted LDAP server, resulting in arbitrary code execution. Successful exploitation could allow the attacker to gain full control over the affected system, potentially leading to significant security risks and potential data breaches. Microsoft released a security update to address this vulnerability, and administrators are encouraged to apply it as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft