PT-2022-2917 · Microsoft · Sharepoint Server

Cjm00Nw + 3 · Published 2022-06-14 · Updated 2025-01-02 · CVE-2022-30157

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified)

Description The issue is related to insufficient input validation in Microsoft SharePoint Server, which can be exploited by a remote attacker to execute arbitrary code. This can be achieved through the deserialization of untrusted data. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-03518

CVE-2022-30157

ZDI-22-871

Affected Products

Sharepoint Server

References · 11

• https://zerodayinitiative.com/advisories/ZDI-22-871 · Security Note
• https://osv.dev/vulnerability/CVE-2022-30157 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30157 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30157 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03518 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30157 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30157 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2022061461 · Note
• https://blog.talosintelligence.com/2022/06/microsoft-patch-tuesday-for-june-2022.html · Note
• https://t.me/cvenotify/32196 · Telegram Post
• https://t.me/cvenotify/32195 · Telegram Post