CVE-2022-26815
Published: 15 April 2022
Summary
CVE-2022-26815 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 7.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-26815 is a remote code execution vulnerability affecting the Windows DNS Server component. It carries a CVSS 3.1 base score of 7.2 with a network attack vector, low attack complexity, and requirement for high privileges, resulting in high impact to confidentiality, integrity, and availability.
An attacker who already possesses high-privileged network access to a vulnerable DNS server can exploit the flaw to execute arbitrary code, potentially taking full control of the server and any zones or data it manages.
Microsoft publishes mitigation guidance and patches for this issue through its security update guide at the referenced URLs. The associated EPSS score has remained flat at a peak of 0.0859 with no material rise after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-31365
Vulnerability details
Windows DNS Server Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.