Windows IKE协议扩展远程代码执行漏洞(CVE-2022-34721)安全风险通告

漏洞名称

Windows IKE协议扩展远程代码执行漏洞(CVE-2022-34721)

公开时间

2022-09-13

更新时间

2022-11-29

CVE编号

CVE-2022-34721

其他编号

QVD-2022-13996

CNNVD-202209-913

威胁类型

代码执行

技术类型

数据验证不恰当

厂商

Microsoft

产品

Windows

风险等级

奇安信CERT风险评级

风险等级

高危

蓝色（一般事件）

现时威胁状态

POC状态

EXP状态

在野利用状态

技术细节状态

已公开

未发现

已发现

已公开

漏洞描述

Windows IKE 协议扩展存在远程代码执行漏洞，此漏洞允许远程攻击者在系统上执行任意代码。IKEEXT 在处理 IKEv1数据包时，没有对用户输入进行充分验证，未经身份认证的远程攻击者可通过向受影响的系统发送特制的 IKEv1数据包触发漏洞，并执行任意代码。

影响版本

Windows Server 2022

Windows 10 Version 21H1 for 32-bit Systems

Windows 10 Version 21H1 for ARM64-based Systems

Windows 10 Version 21H1 for x64-based Systems

Windows Server 2019 (Server Core installation)

Windows Server 2019

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows Server 2012 R2 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 (Server Core installation)

Windows Server 2012

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server   Core installation)

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 11 for ARM64-based Systems

Windows 11 for x64-based Systems

Windows 10 Version 20H2 for ARM64-based Systems

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for x64-based Systems

Windows Server 2022 Azure Edition Core Hotpatch

Windows Server 2022 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core   installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core   installation)

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows RT 8.1

Windows 8.1 for x64-based systems

Windows 8.1 for 32-bit systems

Windows 7 for x64-based Systems Service Pack 1

Windows 7 for 32-bit Systems Service Pack 1

Windows Server 2016 (Server Core installation)

Windows Server 2016

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 for 32-bit Systems

不受影响版本

此漏洞仅影响启用了 IPSec 服务的Windows 系统，默认情况下，Windows不启用 IPSec 服务。

其他受影响组件

无