PT-2022-21616 · Microsoft+1 · Powershell+1

Phil Castellanos · Published 2022-06-21 · Updated 2022-10-25 · CVE-2022-32973

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PowerShell (affected versions not specified)

Description An authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and executes commands with administrator privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-32973

Affected Products

Nessus

Powershell

References · 5

• https://tenable.com/security/tns-2022-11 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32973 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32973 · Vendor Advisory
• https://t.me/cvenotify/31938 · Telegram Post
• https://t.me/cibsecurity/44896 · Telegram Post