PT-2022-5744 · Microsoft · Windows Enterprise App Management Service+1

Ceri Coburn · Published 2022-09-13 · Updated 2023-08-08 · CVE-2022-35841

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Enterprise App Management Service (affected versions not specified)

Description The issue exists due to insufficient input validation in the Windows Enterprise App Management Service, allowing remote attackers to execute arbitrary code. This can affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-07143

CVE-2022-35841

Affected Products

Windows

Windows Enterprise App Management Service

References · 9

• 🔥 https://github.com/Wack0/CVE-2022-35841 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35841 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35841 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-35841 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35841 · Security Note
• https://bdu.fstec.ru/vul/2022-07143 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35841 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-35841 · Vendor Advisory
• https://t.me/cibsecurity/49691 · Telegram Post