CVE-2022-21914 - 漏洞详情

CVE-2022-21914 (CNNVD-202201-776)

HIGH

中文标题:

Microsoft Windows Remote Access Connection Manager 权限许可和访问控制问题漏洞

英文标题:

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS分数: 7.8

发布时间: 2022-01-11 20:23:14

漏洞类型: 权限许可和访问控制问题

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Microsoft Windows Remote Access Connection Manager是美国微软（Microsoft）公司的一项 Windows 服务，用于管理从您的计算机到 Internet 的虚拟专用网络 (VPN)连接，如果禁用此服务，VPN 客户端应用程序将无法启动。 Microsoft Windows Remote Access Connection Manager存在权限许可和访问控制问题漏洞。以下产品和版本受到影响：Windows 10 Version 1909 for ARM64-based Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 for 32-bit Systems,Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 1909 for x64-based Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows 7 for 32-bit Systems Service Pack 1,Windows 7 for x64-based Systems Service Pack 1,Windows 8.1 for 32-bit systems,Windows 8.1 for x64-based systems,Windows RT 8.1,Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation)

英文描述:

NOT_EXTRACTED

CWE类型:

（暂无数据）

受影响产品

厂商	产品	版本	版本范围	平台	CPE
Microsoft	Windows 10 Version 1809	-	< 10.0.17763.2452	-	`cpe:2.3:a:microsoft:windows_10_version_1809::::::::`
Microsoft	Windows Server 2019	-	< 10.0.17763.2452	-	`cpe:2.3:a:microsoft:windows_server_2019::::::::`
Microsoft	Windows Server 2019 (Server Core installation)	-	< 10.0.17763.2452	-	`cpe:2.3:a:microsoft:windows_server_2019_(server_core_installation)::::::::`
Microsoft	Windows 10 Version 1909	-	< 10.0.18363.2037	-	`cpe:2.3:a:microsoft:windows_10_version_1909::::::::`
Microsoft	Windows 10 Version 21H1	-	< 10.0.19043.1466	-	`cpe:2.3:a:microsoft:windows_10_version_21h1::::::::`
Microsoft	Windows Server 2022	-	< 10.0.20348.469	-	`cpe:2.3:a:microsoft:windows_server_2022::::::::`
Microsoft	Windows 10 Version 20H2	-	< 10.0.19042.1466	-	`cpe:2.3:a:microsoft:windows_10_version_20h2::::::::`
Microsoft	Windows Server version 20H2	-	< 10.0.19042.1466	-	`cpe:2.3:a:microsoft:windows_server_version_20h2::::::::`
Microsoft	Windows 11 version 21H2	-	< 10.0.22000.434	-	`cpe:2.3:a:microsoft:windows_11_version_21h2::::::::`
Microsoft	Windows 10 Version 21H2	-	< 10.0.19043.1466	-	`cpe:2.3:a:microsoft:windows_10_version_21h2::::::::`
Microsoft	Windows 10 Version 1507	-	< 10.0.10240.19177	-	`cpe:2.3:a:microsoft:windows_10_version_1507::::::::`
Microsoft	Windows 10 Version 1607	-	< 10.0.14393.4886	-	`cpe:2.3:a:microsoft:windows_10_version_1607::::::::`
Microsoft	Windows Server 2016	-	< 10.0.14393.4886	-	`cpe:2.3:a:microsoft:windows_server_2016::::::::`
Microsoft	Windows Server 2016 (Server Core installation)	-	< 10.0.14393.4886	-	`cpe:2.3:a:microsoft:windows_server_2016_(server_core_installation)::::::::`
Microsoft	Windows 7	-	< 6.1.7601.25829	-	`cpe:2.3:a:microsoft:windows_7::::::::`
Microsoft	Windows 7 Service Pack 1	-	< 6.1.7601.25829	-	`cpe:2.3:a:microsoft:windows_7_service_pack_1::::::::`
Microsoft	Windows 8.1	-	< 6.3.9600.20246	-	`cpe:2.3:a:microsoft:windows_8.1::::::::`
Microsoft	Windows Server 2008 Service Pack 2	-	< 6.0.6003.21349	-	`cpe:2.3:a:microsoft:windows_server_2008_service_pack_2::::::::`
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	-	< 6.0.6003.21349	-	`cpe:2.3:a:microsoft:windows_server_2008_service_pack_2_(server_core_installation)::::::::`
Microsoft	Windows Server 2008 Service Pack 2	-	< 6.0.6003.21349	-	`cpe:2.3:a:microsoft:windows_server_2008__service_pack_2::::::::`
Microsoft	Windows Server 2008 R2 Service Pack 1	-	< 6.1.7601.25829	-	`cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1::::::::`
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	-	< 6.1.7601.25829	-	`cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1_(server_core_installation)::::::::`
Microsoft	Windows Server 2012	-	< 6.2.9200.23584	-	`cpe:2.3:a:microsoft:windows_server_2012::::::::`
Microsoft	Windows Server 2012 (Server Core installation)	-	< 6.2.9200.23584	-	`cpe:2.3:a:microsoft:windows_server_2012_(server_core_installation)::::::::`
Microsoft	Windows Server 2012 R2	-	< 6.3.9600.20246	-	`cpe:2.3:a:microsoft:windows_server_2012_r2::::::::`
Microsoft	Windows Server 2012 R2 (Server Core installation)	-	< 6.3.9600.20246	-	`cpe:2.3:a:microsoft:windows_server_2012_r2_(server_core_installation)::::::::`
microsoft	windows_10	-	-	-	`cpe:2.3:o:microsoft:windows_10:-::::::x64:`
microsoft	windows_10	20h2	-	-	`cpe:2.3:o:microsoft:windows_10:20h2::::::arm64:`
microsoft	windows_10	21h1	-	-	`cpe:2.3:o:microsoft:windows_10:21h1::::::arm64:`
microsoft	windows_10	21h2	-	-	`cpe:2.3:o:microsoft:windows_10:21h2::::::arm64:`
microsoft	windows_10	1607	-	-	`cpe:2.3:o:microsoft:windows_10:1607::::::x64:`
microsoft	windows_10	1809	-	-	`cpe:2.3:o:microsoft:windows_10:1809::::::arm64:`
microsoft	windows_10	1909	-	-	`cpe:2.3:o:microsoft:windows_10:1909::::::arm64:`
microsoft	windows_11	-	-	-	`cpe:2.3:o:microsoft:windows_11:-::::::arm64:`
microsoft	windows_7	-	-	-	`cpe:2.3:o:microsoft:windows_7:-:sp1:::::x64:*`
microsoft	windows_8.1	-	-	-	`cpe:2.3:o:microsoft:windows_8.1:-:::::::*`
microsoft	windows_rt_8.1	-	-	-	`cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*`
microsoft	windows_server	20h2	-	-	`cpe:2.3:o:microsoft:windows_server:20h2:::::::*`
microsoft	windows_server	2022	-	-	`cpe:2.3:o:microsoft:windows_server:2022:::::::*`
microsoft	windows_server_2008	-	-	-	`cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x64:*`
microsoft	windows_server_2008	r2	-	-	`cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*`
microsoft	windows_server_2012	-	-	-	`cpe:2.3:o:microsoft:windows_server_2012:-:::::::*`
microsoft	windows_server_2012	r2	-	-	`cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*`
microsoft	windows_server_2016	-	-	-	`cpe:2.3:o:microsoft:windows_server_2016:-:::::::*`
microsoft	windows_server_2019	-	-	-	`cpe:2.3:o:microsoft:windows_server_2019:-:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability vendor-advisory
cve.org

访问

af854a3a-2127-422b-91ae-364da2661108 OTHER
nvd.nist.gov

访问

CVSS评分详情

3.1 (cna)

HIGH

7.8

CVSS向量: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

机密性

HIGH

完整性

HIGH

可用性

HIGH

时间信息

发布时间:

2022-01-11 20:23:14

修改时间:

2025-01-02 18:22:34

创建时间:

2025-11-11 15:37:17

更新时间:

2025-11-11 15:57:07

利用信息

暂无可利用代码信息

数据源详情

数据源	记录ID	版本	提取时间
CVE	`cve_CVE-2022-21914`	2025-11-11 15:21:17	2025-11-11 07:37:17
NVD	`nvd_CVE-2022-21914`	2025-11-11 14:58:13	2025-11-11 07:45:34
CNNVD	`cnnvd_CNNVD-202201-776`	2025-11-11 15:10:47	2025-11-11 07:57:07

版本与语言

当前版本: v3

主要语言: EN

支持语言:

EN ZH

安全公告

暂无安全公告信息

变更历史

v3 CNNVD

2025-11-11 15:57:07

vulnerability_type: 未提取 → 权限许可和访问控制问题; cnnvd_id: 未提取 → CNNVD-202201-776; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']

查看详细变更

vulnerability_type: 未提取 -> 权限许可和访问控制问题
cnnvd_id: 未提取 -> CNNVD-202201-776
data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']

v2 NVD

2025-11-11 15:45:34

affected_products_count: 27 → 45; references_count: 1 → 2; data_sources: ['cve'] → ['cve', 'nvd']

查看详细变更

affected_products_count: 27 -> 45
references_count: 1 -> 2
data_sources: ['cve'] -> ['cve', 'nvd']

CVE-2022-21914 (CNNVD-202201-776)

中文标题:

Microsoft Windows Remote Access Connection Manager 权限许可和访问控制问题漏洞

英文标题:

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

漏洞描述

中文描述:

英文描述:

CWE类型:

标签:

受影响产品

解决方案

中文解决方案:

英文解决方案:

临时解决方案:

参考链接

CVSS评分详情

3.1 (cna)

时间信息

利用信息

数据源详情

版本与语言

安全公告

变更历史