CVE-2022-37976
Published: 11 October 2022
Summary
CVE-2022-37976 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 5.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-37976 is an elevation of privilege vulnerability in Active Directory Certificate Services. The affected component runs on Windows Server systems that host the AD CS role and is reachable over the network.
An authenticated attacker with low privileges can exploit the flaw remotely without user interaction to obtain high impact on confidentiality, integrity, and availability, effectively allowing full compromise of the certificate authority and any certificates it issues.
Microsoft security advisories at the referenced URLs describe the issue and direct administrators to apply the updates released on the October 2022 Patch Tuesday. The updates address the vulnerability in supported versions of Windows Server.
EPSS for the CVE remains at 0.1585 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-40583
Vulnerability details
Active Directory Certificate Services Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.