CVE-2022-30161
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jun 15, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-30161 is a remote code execution vulnerability affecting Microsoft Windows Server's Lightweight Directory Access Protocol (LDAP). An attacker can exploit this weakness by sending maliciously crafted LDAP messages to a targeted LDAP server, resulting in arbitrary code execution on the server. Successful exploitation could grant an attacker full system control, potentially leading to significant data loss or system compromise. Organizations using Windows Server with LDAP should apply the available patch promptly to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft