Important Vulnerability in Windows SMBv3

Release Date: 10-03-2022 22:05:00

Important Vulnerability in Windows SMBv3

History:

10/03/2022 --- v1.0 -- Initial publication

Summary

On March 8th, Microsoft fixed in the monthly Patch Tuesday 71 vulnerabilities with three classified as Critical as they allow remote code execution [1]. A remote code execution vulnerability classified as Important affects Windows SMBv3 Client/Server.

The vulnerability tracked as CVE-2022-24508 is a remote code execution vulnerability allowing an authenticated user to execute malicious code on Windows 10 version 2004 and newer systems via SMBv3 [2]. No active exploitation of this vulnerability is known yet.

Technical Details

There is not much detail available about how this vulnerability could be exploited. However, it is notable because it is listed as Exploitation more likely by Microsoft. This vulnerability is rated Important rather than Critical. There is no public disclosure, and it is not currently being exploited. However, the attack vector and likelihood of exploitation make it a candidate for possible attacks, and so this should be a high priority for patching [3].