CVE-2022-30139
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2022-30139 is a remote code execution vulnerability affecting Windows Lightweight Directory Access Protocol (LDAP). Maliciously crafted LDAP messages can be used to exploit this issue, potentially granting attackers administrative access to compromised systems. Successful exploitation may lead to the installation of unauthorized software, unauthorized access to sensitive information, or further system compromise. Microsoft has released a patch to mitigate this vulnerability, and it is strongly recommended that all affected systems be updated as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 10
- Microsoft Windows Server 2016
- Windows Server 2022
- Microsoft Windows Server 2019
- Microsoft Windows 11
Affected Vendors
- Microsoft