HTTP Protocol Stack Remote Code Execution Vulnerability
97Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck y tiene prueba de concepto pública.
ssvc Actcvss 9.8epss 93%
de la publicación al arma0 días
Publicada en NVD11 ene
1ª PoC11 ene
VulnCheck+847d
probabilidad de explotación
93%top 1% de las CVE
explotación observada
síVulnCheck
31 exploit(s) público(s)
HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Productos afectados
Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H1Microsoft · Windows 10 Version 21H2Microsoft · Windows 11 version 21H2Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server version 20H2PoCs públicas encontradas — 31
exploitdbwww.exploit-db.com/exploits/51575no verificadogithubgithub.com/ZZ-SOCMAP/CVE-2022-21907★ 361githubgithub.com/polakow/CVE-2022-21907★ 128githubgithub.com/p0dalirius/CVE-2022-21907-http.sys★ 83githubgithub.com/michelep/CVE-2022-21907-Vulnerability-PoC★ 29githubgithub.com/mauricelambert/CVE-2022-21907★ 26githubgithub.com/Malwareman007/CVE-2022-21907★ 17githubgithub.com/0xmaximus/Home-Demolisher★ 8githubgithub.com/corelight/cve-2022-21907★ 5githubgithub.com/gpiechnik2/nmap-CVE-2022-21907★ 2githubgithub.com/iveresk/cve-2022-21907-http.sys★ 1githubgithub.com/kamal-marouane/CVE-2022-21907★ 1githubgithub.com/iveresk/cve-2022-21907★ 1githubgithub.com/siboy17/CVE-2022-21907-http.sys★ 0githubgithub.com/EzoomE/CVE-2022-21907-RCE★ 0githubgithub.com/cassie0206/CVE-2022-21907★ 0githubgithub.com/asepsaepdin/CVE-2022-21907★ 0vulncheckvulncheck.com/xdb/167adf17e68cno verificadovulncheckvulncheck.com/xdb/79c1d5825bd3no verificadovulncheckvulncheck.com/xdb/1306e5fc35fbno verificadovulncheckvulncheck.com/xdb/f31e1149e743no verificadovulncheckvulncheck.com/xdb/837d27449c0ano verificadovulncheckvulncheck.com/xdb/8444bab2f56fno verificadovulncheckvulncheck.com/xdb/86fb978ad867no verificadovulncheckvulncheck.com/xdb/65a99dd97dd6no verificadovulncheckvulncheck.com/xdb/2590a1a4a8efno verificadocve_referencepacketstormsecurity.com/files/166730/Microsoft-HTTP-Protocol-Stack-Denial-Of-Service.htmlno verificadovulncheckvulncheck.com/xdb/9e5b11d4061dno verificadovulncheckvulncheck.com/xdb/d5f3de9489d0no verificadovulncheckvulncheck.com/xdb/8d7c3f5c3e4cno verificadovulncheckvulncheck.com/xdb/bb7d8819859eno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.