Main Vulnerability Database Vulnerabilities #VU68240

Security features bypass in Microsoft Windows and Windows Server - CVE-2022-38032

Published: October 12, 2022

Vulnerability identifier: #VU68240

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-38032

CWE-ID: CWE-254

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to security features bypass in the Windows Portable Device Enumerator Service. An authenticated attacker with physical access can bypass security feature on system.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2022-38032

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38032

Related Security Bulletins