PT-2022-4787 · Microsoft · Windows

Quan Luo · Published 2022-09-13 · Updated 2025-04-11 · CVE-2022-34718

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version

Description The vulnerability is related to errors in handling input data in the implementation of the TCP/IP protocol in Windows operating systems. This issue allows a remote attacker to execute arbitrary code and affect the system.

Recommendations As a temporary workaround, consider disabling the vulnerable TCP/IP protocol until a patch is available. Restrict access to the vulnerable TCP/IP module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-05728

CVE-2022-34718

Affected Products

Windows

References · 23

• 🔥 https://github.com/numencyber/VulnerabilityPoC · Exploit
• 🔥 https://github.com/SecLabResearchBV/CVE-2022-34718-PoC · Exploit
• https://osv.dev/vulnerability/CVE-2022-34718 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34718 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34718 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-34718 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34718 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-34718 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05728 · Security Note
• https://twitter.com/syedaquib77/status/1910684859091026214 · Twitter Post
• https://twitter.com/0xor0ne/status/1701271939149389927 · Twitter Post
• https://t.me/avleonovcom/1033 · Telegram Post
• https://t.me/pentestingnews/32383 · Telegram Post
• https://twitter.com/xssnu/status/1905729786967917046 · Twitter Post
• https://t.me/ckure/11967 · Telegram Post