CVE-2022-34720
Published: 13 September 2022
Summary
CVE-2022-34720 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 3.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-34720 is a denial-of-service vulnerability in the Windows Internet Key Exchange (IKE) Extension. The flaw resides in the IKE implementation used for IPsec VPN connections and carries a CVSS 3.1 score of 7.5, reflecting network-accessible attack vectors that require no authentication or user interaction and result in high impact to availability.
An unauthenticated remote attacker can send specially crafted IKE packets to a vulnerable Windows system, triggering a crash in the IKE service and thereby disrupting IPsec-based VPN tunnels and related network connectivity without affecting confidentiality or integrity.
Microsoft’s security advisory for CVE-2022-34720 directs administrators to apply the updates released in the September 2022 Patch Tuesday cycle; the guidance lists the specific Windows versions affected and confirms that the patches address the IKE extension code path responsible for the crash.
The EPSS score for this CVE reached 0.2921 at its peak and remains at that level, indicating moderate and sustained exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-37669
Vulnerability details
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.