Main Vulnerability Database Vulnerabilities #VU68136

Spoofing attack in Microsoft Windows and Windows Server - CVE-2022-34689

Published: October 11, 2022 / Updated: January 27, 2023

Vulnerability identifier: #VU68136

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-34689

CWE-ID: CWE-451

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data in the Windows CryptoAPI. A remote attacker can manipulate an existing public x.509 certificate, spoof page content and and perform actions such as authentication or code signing as the targeted certificate.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2022-34689

Install updates from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #8772 - CVE-2022-34689 - CryptoAPI spoofing vulnerability (January 27, 2023)

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34689

Related Security Bulletins

Spoofing attack in Microsoft Windows CryptoAPI