CVE-2022-21914— Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows 10 Version 1809

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows Remote Access Connection Manager是美国微软（Microsoft）公司的一项 Windows 服务，用于管理从您的计算机到 Internet 的虚拟专用网络 (VPN)连接，如果禁用此服务，VPN 客户端应用程序将无法启动。 Microsoft Windows Remote Access Connection Manager存在权限许可和访问控制问题漏洞。以下产品和版本受到影响：Windows 10 Version 1909 for ARM

CVE-2022-21914 affects Microsoft Windows 10 Version 1809. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows Remote Access Connection Manager是美国微软（Microsoft）公司的一项 Windows 服务，用于管理从您的计算机到 Internet 的虚拟专用网络 (VPN)连接，如果禁用此服务，VPN 客户端应用程序将无法启动。 Microsoft Windows Remote Access Co CVE-2022-21914 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2022-21914

I. Basic Information for CVE-2022-21914

Affected Products

II. Public POCs for CVE-2022-21914

III. Intelligence Information for CVE-2022-21914

Vendor Advisories for CVE-2022-21914 (1)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21914 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2022-21914

Same Patch Batch · Microsoft · 2022-01-11 · 100 CVEs total

Showing top 20 of 100 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-21914