CVE-2022-33634

Summary

CVE-2022-33634 is a remote code execution vulnerability affecting the Windows Point-to-Point Tunneling Protocol (PPTP). An attacker can exploit this weakness by sending a specially crafted packet to a target system, resulting in arbitrary code execution on the victim's machine. Successful exploitation allows the attacker to gain control over the compromised system, potentially leading to data theft or further exploitation. Windows servers and clients using PPTP are at risk, and it is recommended that organizations disable PPTP and switch to more secure alternatives like Secure Socket Tunneling Protocol (SSTP), Layer Two Tunneling Protocol (L2TP), or Internet Protocol Security (IPsec).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.