CVE-2022-37980

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 11, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-37980 is a newly disclosed vulnerability affecting the Windows DHCP (Dynamic Host Configuration Protocol) Client. This elevation of privilege issue allows an attacker to gain administrative control on a targeted system by exploiting a flaw in the way DHCP Client handles DHCP options. Successful exploitation could lead to serious consequences, including unauthorized access, data theft, or system damage. Microsoft recommends installing the latest security update to mitigate this vulnerability. Users are advised to enable protections such as Network Access Protection and Group Policy settings to minimize potential risks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows 10
  • Windows Server 2022
  • Microsoft Windows 11

Affected Vendors

  • Microsoft