CVE-2022-37972

Summary

CVE-2022-37972 is a spoofing vulnerability affecting Microsoft Endpoint Configuration Manager. attackers can manipulate the software's behavior by deceitfully masquerading as a trusted source, potentially leading to unauthorized actions within the system. This issue poses a significant risk to organizations using the Endpoint Configuration Manager, as it could allow attackers to gain unauthorized access and control, compromising security and potentially leading to data breaches. Microsoft has released a patch to address this vulnerability, and it is strongly recommended that affected organizations install it as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.