Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35753
8.1HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 31 May 2023
What is CVE-2022-35753?
The Windows Secure Socket Tunneling Protocol (SSTP) contains a vulnerability that allows an attacker to execute arbitrary code remotely. This issue can arise when the SSTP service improperly handles requests, leading to potential system compromise. Ensuring that systems using SSTP are updated and secured is crucial for maintaining robust cybersecurity measures against exploitation.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.19387
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.5291
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.3287