PT-2022-4788 · Microsoft · Windows Common Log File System Driver+1

Genwei Jiang + 1 · Published 2022-09-13 · Updated 2024-11-24 · CVE-2022-37969

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver versions prior to 10.0.10240.19444 Windows Common Log File System Driver versions prior to 10.0.14393.5356 Windows Common Log File System Driver versions prior to the fixed version

Description The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code with system privileges. This can lead to an elevation-of-privilege vulnerability, affecting the system.

Recommendations For versions prior to 10.0.10240.19444, update to a version that includes the fix for this issue. For versions prior to 10.0.14393.5356, update to a version that includes the fix for this issue. For all affected versions, consider restricting access to the vulnerable driver until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-05729

CVE-2022-37969

Affected Products

Windows

Windows Common Log File System Driver

References · 32

• 🔥 https://github.com/fortra/CVE-2022-37969 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-37969 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37969 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37969 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-37969 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37969 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37969 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05729 · Security Note
• https://t.me/true_secator/5243 · Telegram Post
• https://twitter.com/reverseame/status/1703785454208778670 · Twitter Post
• https://t.me/offensivetwitter/1909 · Telegram Post
• https://t.me/cibsecurity/49681 · Telegram Post
• https://t.me/true_secator/3412 · Telegram Post
• https://t.me/echeloneyes/677 · Telegram Post
• https://t.me/pentestingnews/27951 · Telegram Post