Detections
Analytics
Microsoft Windows Raw Image Extensions Library RCE (December 2022)
high Nessus Plugin ID 168684
Language:
Synopsis
The Windows app installed on the remote host is affected by a remote code execution vulnerability.Description
The Windows 'Raw Image Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.Solution
Upgrade to app version 2.0.32791.0, 2.1.32791.0 or later via the Microsoft Store.See Also
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44687
Plugin Details
Severity: High
ID: 168684
File Name: smb_nt_ms22_dec_raw_image.nasl
Version: 1.6
Type: local
Agent: windows
Family: Windows
Published: 12/13/2022
Updated: 3/27/2024
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2022-44687
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/Registry/Enumerated, WMI/Windows App Store/Enumerated
Exploit Ease: No known exploits are available
Patch Publication Date: 12/13/2022
Vulnerability Publication Date: 12/13/2022
Reference Information
CVE: CVE-2022-44687
IAVA: 2022-A-0530-S