CVE-2022-26811
Published: 15 April 2022
Summary
CVE-2022-26811 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2016. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 8.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The vulnerability CVE-2022-26811 is a remote code execution flaw affecting the Windows DNS Server component. It carries a CVSS 3.1 score of 7.2 with a network attack vector, low attack complexity, and high privileges required, resulting in high impact to confidentiality, integrity, and availability.
An attacker able to reach the DNS server over the network and who already possesses high privileges can leverage the flaw to execute arbitrary code, potentially taking full control of the server and any hosted zones or related services.
Microsoft security advisories linked in the references describe available patches and mitigation guidance for the issue. The associated EPSS score has remained flat at a peak of 0.0697 with no material rise after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-31361
Vulnerability details
Windows DNS Server Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.