CVE-2022-23265

Deeper analysis

Microsoft Defender for IoT contains a remote code execution vulnerability identified as CVE-2022-23265 and published in March 2022. The flaw received a CVSS 3.1 base score of 7.2 under the vector string AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, confirming network-accessible impact that can fully compromise confidentiality, integrity, and availability when successfully triggered.

An authenticated attacker possessing high privileges can send specially crafted network requests to the affected component and achieve arbitrary code execution on the target system. Because the attack requires valid high-privilege credentials and does not rely on user interaction, the primary risk surface is exposure of management interfaces or APIs to partially trusted networks.

Microsoft publishes remediation guidance in its Security Response Center advisory for this CVE. The associated EPSS values have remained low, moving only from a peak of 0.0641 to a current score of 0.0611, indicating no material increase in observed exploitation activity after disclosure.