PT-2022-3744 · Microsoft · Windows Internet Information Services+1

Orange_8361 · Published 2022-07-12 · Updated 2023-05-17 · CVE-2022-22025

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows Internet Information Services (affected versions not specified)

Description The issue is related to the Cachuri Module in Microsoft Internet Information Services (IIS) and involves incorrect clearance or release of resources. This can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2022-04532

CVE-2022-22025

Affected Products

Windows

Windows Internet Information Services

References · 9

• https://bdu.fstec.ru/vul/2022-04532 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22025 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22025 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-22025 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-22025 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22025 · Security Note
• https://t.me/cvenotify/50667 · Telegram Post
• https://t.me/pentestingnews/27108 · Telegram Post