CVE-2022-30136
Published: 15 June 2022
Summary
CVE-2022-30136 is a critical-severity an unspecified weakness vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 2.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-30136 is a remote code execution vulnerability in the Windows Network File System (NFS) component. It affects multiple versions of Windows that implement NFS services and carries a CVSS 3.1 base score of 9.8, reflecting network-accessible attack vectors that require neither authentication nor user interaction.
An unauthenticated attacker can send specially crafted NFS traffic to a vulnerable system and achieve arbitrary code execution with the privileges of the NFS service, resulting in full compromise of confidentiality, integrity, and availability on the target host.
Microsoft security advisories for CVE-2022-30136 direct administrators to apply the vendor-supplied security updates released on the June 2022 Patch Tuesday; the updates address the flaw in the NFS driver and related components.
The CVE’s EPSS score reached a peak of 0.4339 and currently stands at 0.3778, indicating sustained but moderate exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-35344
Vulnerability details
Windows Network File System Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.