CVE-2022-34718

Меры по смягчению последствий

Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might be helpful in your situation:

Only systems with the IKE and AuthIP IPsec Keying Modules running are vulnerable to this attack.

You can run either of the following commands to check the running status of this service:

PS: C:\> Get-Service Ikeext

• OR

Cmd: C:\> sc query ikeext

This mitigation could have negative affects on your IPSec functionality. Microsoft strongly recommends updating your system with the latest Windows security updates.

FAQ

How could an attacker exploit this vulnerability?

An unauthenticated attacker could send a specially crafted IPv6 packet to a Windows node where IPSec is enabled, which could enable a remote code execution exploitation on that machine.