CVE-2022-23268 - Vulnerability Details - OpenCVE

ReportizFlow

Windows Hyper-V Denial of Service Vulnerability

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:L/AC:L/Au:N/C:N/I:N/A:P

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Microsoft	Windows 11 Windows Server 2022

Configuration 1 [-]

OR	cpe:2.3:o:microsoft:windows_11:-::::::x64:
	cpe:2.3:o:microsoft:windows_server_2022:-:::::::*

No data.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23268

History

Thu, 02 Jan 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 02 Jan 2025 19:00:00 +0000

Type	Values Removed	Values Added
CPEs	cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.613::::::x64: cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.643:::::::*
Vendors & Products	Microsoft windows 11 21h2

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2022-04-15T19:02:54

Updated: 2025-01-02T18:51:03.453Z

Reserved: 2022-01-15T00:00:00

Link: CVE-2022-23268

Vulnrichment

Updated: 2024-08-03T03:36:20.323Z

NVD

Status : Modified

Published: 2022-04-15T19:15:09.747

Modified: 2024-11-21T06:48:17.540

Link: CVE-2022-23268

Redhat

No data.

{"containers": {"cna": {"title": "Windows Hyper-V Denial of Service Vulnerability", "datePublic": "2022-04-12T08:00:00+00:00", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.20348.0", "versionEndExcluding": "10.0.20348.643"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*", "versionStartIncluding": "10.0.0", "versionEndExcluding": "10.0.22000.613"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Windows Server 2022", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.20348.0", "lessThan": "10.0.20348.643", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.0", "lessThan": "10.0.22000.613", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Windows Hyper-V Denial of Service Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "Denial of Service", "lang": "en-US", "type": "Impact"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-01-02T18:51:03.453Z"}, "references": [{"name": "Windows Hyper-V Denial of Service Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23268"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-18T14:49:17.358414Z", "id": "CVE-2022-23268", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-18T14:49:53.230Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T03:36:20.323Z"}, "title": "CVE Program Container", "references": [{"name": "Windows Hyper-V Denial of Service Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23268"}]}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2022-23268", "datePublished": "2022-04-15T19:02:54", "dateReserved": "2022-01-15T00:00:00", "dateUpdated": "2025-01-02T18:51:03.453Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23268", "name": "Windows Hyper-V Denial of Service Vulnerability", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T03:36:20.323Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-23268", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-18T14:49:17.358414Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-18T14:49:21.703Z"}}], "cna": {"title": "Windows Hyper-V Denial of Service Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Windows Server 2022", "versions": [{"status": "affected", "version": "10.0.20348.0", "lessThan": "10.0.20348.643", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows 11 version 21H2", "versions": [{"status": "affected", "version": "10.0.0", "lessThan": "10.0.22000.613", "versionType": "custom"}], "platforms": ["x64-based Systems"]}], "datePublic": "2022-04-12T08:00:00+00:00", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23268", "name": "Windows Hyper-V Denial of Service Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Windows Hyper-V Denial of Service Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "Impact", "description": "Denial of Service"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.0.20348.643", "versionStartIncluding": "10.0.20348.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "10.0.22000.613", "versionStartIncluding": "10.0.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-01-02T18:51:03.453Z"}}}, "cveMetadata": {"cveId": "CVE-2022-23268", "state": "PUBLISHED", "dateUpdated": "2025-01-02T18:51:03.453Z", "dateReserved": "2022-01-15T00:00:00", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2022-04-15T19:02:54", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}