Vulnerabilitycritical

Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as 'Critical'

The Hacker Newsby @TheHackersNewsDec 15, 2022 · 00:00 UTC (Dec 15, 2022)1 min read4 · 2 reads

Read at thehackernews.com

Analyze CVE-2022-37958 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-37958 CVE-2017-0144

Tags: cve-2022-37958 cve-2017-0144 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-0144	Remote Code Execution in Microsoft SMBv1 (EternalBlue) affecting Windows and Siemens devices	8.8	99%	KEVRansomwarePoC ×6	Mar 17, 2017 KEV Feb 10, 2022
CVE-2022-37958	SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability	8.1	86%		Sep 13, 2022

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 15, 2022 Windows Security / Network Security Microsoft has revised the severity of a security vulnerability it originally patched in September 2022 , upgrading it to "Critical" after it emerged that it could be exploited to achieve remote code execution. Tracked as CVE-2022-37958 (CVSS score: 8.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.