PT-2022-2166 · Microsoft · Windows Smb+1

Yuki Chen · Published 2022-04-12 · Updated 2025-03-10 · CVE-2022-24500

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows SMB (affected versions not specified)

Description The vulnerability in the Windows SMB protocol implementation allows remote attackers to execute arbitrary code. This issue is related to the possibility of redirecting a user to an SMB server controlled by an attacker. The exploitation of this vulnerability can enable a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-02174

CVE-2022-24500

Affected Products

Windows

Windows Smb

References · 18

• 🔥❌ https://github.com/Daro1967/CVE-2022-24500-RCE · Exploit, Deleted
• 🔥❌ https://github.com/rkxxz/CVE-2022-24500 · Exploit, Deleted
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-24500 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24500 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24500 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24500 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02174 · Security Note
• https://t.me/true_secator/2968 · Telegram Post
• https://t.me/cvenotify/29037 · Telegram Post
• https://twitter.com/CyberPentestLab/status/1898898895201050896 · Twitter Post
• https://t.me/aptreports/922 · Telegram Post
• https://t.me/proxy_bar/839 · Telegram Post
• https://t.me/echeloneyes/296 · Telegram Post