CVE-2022-24498: Windows iSCSI Target Service Information Disclosure Vulnerability
CVE-2022-24498 is an information disclosure vulnerability in Windows iSCSI Target Service, rated Important by Microsoft, with a CVSS 3.1 base score of 6.5 (Medium). An attacker can exploit it remotely over the network, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 2.57% probability of exploitation activity in the next 30 days, higher than 85% of all scored vulnerabilities. Microsoft released the fix on 12 April 2022, outside Patch Tuesday, delivered through 15 security updates (KB5012647, KB5012591, KB5012599, KB5012604 and more). It affects 42 products in 2 product families (Windows, ESU).
Key facts
- CVE ID
- CVE-2022-24498
- Severity
- Medium CVSS 6.5
- Microsoft severity
- Important
- Impact
- Information Disclosure
- Exploited in the wild
- No
- Publicly disclosed
- No
- Exploitation likelihood
- Less Likely
- EPSS
- 2.57% (percentile 85%)
- CISA KEV
- Not listed
- Released
- Last updated
- Patch Tuesday
- April 2022 Patch Tuesday
- Product families
- Windows, ESU
CVSS score and vector
Microsoft scores CVE-2022-24498 at 6.5 (temporal 5.7) using CVSS 3.1. Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
| Metric | Value |
|---|---|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality impact | High |
| Integrity impact | None |
| Availability impact | None |
| Exploit code maturity | Unproven |
| Remediation level | Official fix |
| Report confidence | Confirmed |
Frequently asked questions (Microsoft)
What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.
Affected products (42)
Windows
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Windows 10 Version 1809 for 32-bit Systems | KB5012647 | Security Update | 10.0.17763.2803 | Yes |
| Windows 10 Version 1809 for x64-based Systems | KB5012647 | Security Update | 10.0.17763.2803 | Yes |
| Windows 10 Version 1809 for ARM64-based Systems | KB5012647 | Security Update | 10.0.17763.2803 | Yes |
| Windows Server 2019 | KB5012647 | Security Update | 10.0.17763.2803 | Yes |
| Windows Server 2019 (Server Core installation) | KB5012647 | Security Update | 10.0.17763.2803 | Yes |
| Windows 10 Version 1909 for 32-bit Systems | KB5012591 | Security Update | 10.0.18363.2212 | Yes |
| Windows 10 Version 1909 for x64-based Systems | KB5012591 | Security Update | 10.0.18363.2212 | Yes |
| Windows 10 Version 1909 for ARM64-based Systems | KB5012591 | Security Update | 10.0.18363.2212 | Yes |
| Windows 10 Version 21H1 for x64-based Systems | KB5012599 | Security Update | 10.0.19043.1645 | Yes |
| Windows 10 Version 21H1 for ARM64-based Systems | KB5012599 | Security Update | 10.0.19043.1645 | Yes |
| Windows 10 Version 21H1 for 32-bit Systems | KB5012599 | Security Update | 10.0.19043.1645 | Yes |
| Windows Server 2022 | KB5012604 | Security Update | 10.0.20348.643 | Yes |
| Windows Server 2022 (Server Core installation) | KB5012604 | Security Update | 10.0.20348.643 | Yes |
| Windows 10 Version 20H2 for 32-bit Systems | ||||
| Windows 10 Version 20H2 for ARM64-based Systems | ||||
| Windows Server, version 20H2 (Server Core Installation) | ||||
| Windows 11 version 21H2 for x64-based Systems | KB5012592 | Security Update | 10.0.22000.613 | Yes |
| Windows 11 version 21H2 for ARM64-based Systems | KB5012592 | Security Update | 10.0.22000.613 | Yes |
| Windows 10 Version 21H2 for 32-bit Systems | ||||
| Windows 10 Version 21H2 for ARM64-based Systems | ||||
| Windows 10 Version 21H2 for x64-based Systems | ||||
| Windows 10 for 32-bit Systems | KB5012653 | Security Update | 10.0.10240.19265 | Yes |
| Windows 10 for x64-based Systems | KB5012653 | Security Update | 10.0.10240.19265 | Yes |
| Windows 10 Version 1607 for 32-bit Systems | KB5012596 | Security Update | 10.0.14393.5066 | Yes |
| Windows 10 Version 1607 for x64-based Systems | KB5012596 | Security Update | 10.0.14393.5066 | Yes |
| Windows Server 2016 | KB5012596 | Security Update | 10.0.14393.5066 | Yes |
| Windows Server 2016 (Server Core installation) | KB5012596 | Security Update | 10.0.14393.5066 | Yes |
| Windows 8.1 for 32-bit systems | KB5012670 KB5012639 | Monthly Rollup Security Only | 6.3.9600.20337 6.3.9600.20337 | Yes Yes |
| Windows 8.1 for x64-based systems | KB5012670 KB5012639 | Monthly Rollup Security Only | 6.3.9600.20337 6.3.9600.20337 | Yes Yes |
| Windows RT 8.1 | KB5012670 | Monthly Rollup | 6.3.9600.20337 | Yes |
ESU
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Windows 7 for 32-bit Systems Service Pack 1 | KB5012626 KB5012649 | Monthly Rollup Security Only | 6.1.7601.25924 6.1.7601.25924 | Yes Yes |
| Windows 7 for x64-based Systems Service Pack 1 | KB5012626 KB5012649 | Monthly Rollup Security Only | 6.1.7601.25924 6.1.7601.25924 | Yes Yes |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | KB5012658 KB5012632 | Monthly Rollup Security Only | 6.0.6003.21446 6.0.6003.21446 | Yes Yes |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | KB5012658 KB5012632 | Monthly Rollup Security Only | 6.0.6003.21446 6.0.6003.21446 | Yes Yes |
| Windows Server 2008 for x64-based Systems Service Pack 2 | KB5012658 KB5012632 | Monthly Rollup Security Only | 6.0.6003.21446 6.0.6003.21446 | Yes Yes |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | KB5012658 KB5012632 | Monthly Rollup Security Only | 6.0.6003.21446 6.0.6003.21446 | Yes Yes |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB5012626 KB5012649 | Monthly Rollup Security Only | 6.1.7601.25924 6.1.7601.25924 | Yes Yes |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | KB5012626 KB5012649 | Monthly Rollup Security Only | 6.1.7601.25924 6.1.7601.25924 | Yes Yes |
| Windows Server 2012 | KB5012650 KB5012666 | Monthly Rollup Security Only | 6.2.9200.23679 6.2.9200.23679 | Yes Yes |
| Windows Server 2012 (Server Core installation) | KB5012650 KB5012666 | Monthly Rollup Security Only | 6.2.9200.23679 6.2.9200.23679 | Yes Yes |
| Windows Server 2012 R2 | KB5012670 KB5012639 | Monthly Rollup Security Only | 6.3.9600.20337 6.3.9600.20337 | Yes Yes |
| Windows Server 2012 R2 (Server Core installation) | KB5012670 KB5012639 | Monthly Rollup Security Only | 6.3.9600.20337 6.3.9600.20337 | Yes Yes |
Security updates (15)
- KB5012647 (Security Update)
- KB5012591 (Security Update)
- KB5012599 (Security Update)
- KB5012604 (Security Update)
- KB5012592 (Security Update)
- KB5012653 (Security Update)
- KB5012596 (Security Update)
- KB5012626 (Monthly Rollup)
- KB5012649 (Security Only)
- KB5012670 (Monthly Rollup)
- KB5012639 (Security Only)
- KB5012658 (Monthly Rollup)
- KB5012632 (Security Only)
- KB5012650 (Monthly Rollup)
- KB5012666 (Security Only)
NIST NVD data
- NVD status
- Modified
- NVD CVSS
- 6.5 (MEDIUM)
- Published to NVD
- NVD last modified
Affected configurations (CPE)
| Product | Vulnerable versions |
|---|---|
| windows 10 | all listed versions |
| windows 10 20h2 | all listed versions |
| windows 10 21h1 | all listed versions |
| windows 10 21h2 | all listed versions |
| windows 10 1607 | all listed versions |
| windows 10 1809 | all listed versions |
| windows 10 1909 | all listed versions |
| windows 11 (arm64) | all listed versions |
| windows 11 (x64) | all listed versions |
| windows 7 | all listed versions |
| windows 8.1 | all listed versions |
| windows rt 8.1 | all listed versions |
| windows server 2008 | all listed versions |
| windows server 2008 r2 (x64) | all listed versions |
| windows server 2012 | all listed versions |
| windows server 2012 r2 | all listed versions |
| windows server 2016 | all listed versions |
| windows server 2016 20h2 | all listed versions |
| windows server 2019 | all listed versions |
| windows server 2022 | all listed versions |
References
Acknowledgments
- liubenjin with Codesafe Team of Legendsec at Qi'anxin Group
Revision history
| Version | Date | Description |
|---|---|---|
| 1.0 | Information published. |