CVE-2022-29108: Microsoft SharePoint Server Remote Code Execution Vulnerability

Overview

Severity

High (CVSS 8.8)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Category

Remote Code Execution

Exploit Status

Not Exploited

Exploitation Likelihood

More Likely

Patch Tuesday

2022-May

Released

2022-05-10

EPSS Score

9.45% (percentile: 92.8%)

FAQ

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? The attacker must be authenticated and possess the permissions for page creation to be able to exploit this vulnerability.

Affected Products (4)

Microsoft Office

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft SharePoint Foundation 2013 Service Pack 1

Security Updates (4)

• 5002195
• 5002207
• 5002194
• 5002203

Acknowledgments

<a href="https://twitter.com/testanull">Nguyen Tien Giang</a> with <a href="https://twitter.com/starlabs_sg">STAR Labs</a>, Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>, <a href="https://twitter.com/_q5ca">Q5Ca</a> with <a href="https://khonggianmang.vn/">NCSC Vietnam</a>, Yuhao Weng & Zhiniang Peng & Feng Dong with <a href="https://www.sangfor.com/">Sangfor</a>

Revision History

• 2022-05-10: Information published.