CVE-2022-37981
Published: 11 October 2022
Summary
CVE-2022-37981 is a medium-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 4.3 (Medium).
Operationally, ranked in the top 6.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-37981 is a denial-of-service vulnerability in the Windows Event Logging Service. The flaw received a CVSS 3.1 score of 4.3 and is remotely triggerable by an authenticated attacker, resulting in loss of availability without affecting confidentiality or integrity.
An attacker with low privileges can send specially crafted network requests to the affected service, causing it to stop responding and disrupting event collection and logging on the target system. No user interaction is required and the attack can be mounted over the network.
Microsoft has published security advisories for CVE-2022-37981 that detail available patches and mitigation guidance; administrators should consult the referenced Microsoft Security Response Center entries for the specific update packages applicable to their Windows versions.
The associated EPSS score has remained flat at 0.1107 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-40588
Vulnerability details
Windows Event Logging Service Denial of Service Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.