CVE-2022-26813
Published: 15 April 2022
Summary
CVE-2022-26813 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 7.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-26813 is a remote code execution vulnerability affecting the Windows DNS Server component. The flaw carries a CVSS 3.1 base score of 7.2 with network attack vector, low attack complexity, and high privileges required, enabling an authenticated attacker to achieve full compromise of confidentiality, integrity, and availability on the affected system.
An attacker with high-privilege access to the DNS server over the network can exploit the vulnerability to execute arbitrary code without user interaction, resulting in complete takeover of the DNS service and potentially the underlying Windows host.
Microsoft security advisories at the referenced MSRC update guide detail available patches and mitigation steps for the vulnerability.
EPSS for the CVE remains flat at a peak and current value of 0.0938 with no material rise observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-31363
Vulnerability details
Windows DNS Server Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.