Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-84112
HistoryAug 11, 2022 - 12:00 a.m.

Microsoft Azure Site Recovery Remote Code Execution Vulnerability (CNVD-2022-84112)

2022-08-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
microsoft
azure
site recovery
remote code execution
vulnerability
draas
cloud
hybrid cloud
network system
product
special elements
code segments
external input data
arbitrary code
attacker

EPSS

0.013

Percentile

85.6%

Microsoft Azure Site Recovery is a site recovery (DRaaS) from Microsoft Corporation for cloud and hybrid cloud architectures. The vulnerability stems from the failure of a network system or product to properly filter special elements of code segments during the construction of external input data. An attacker could use this vulnerability to execute arbitrary code on the system.

EPSS

0.013

Percentile

85.6%