CVE-2022-37968
criticalpriority · track · 1EPSS 0.030 · 87 %ileEURUUSEPSS · scored 2026-10-27
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedAzure Arc-enabled Kubernetes cluster 1.5.8msrc_csaf
1.5.8:Security Update:https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes
https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes - FixedAzure Arc-enabled Kubernetes cluster 1.6.19msrc_csaf
1.6.19:Security Update:https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes
https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes - FixedAzure Arc-enabled Kubernetes cluster 1.7.18msrc_csaf
1.7.18:Security Update:https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes
https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes - FixedAzure Arc-enabled Kubernetes cluster 1.8.11msrc_csaf
1.8.11:Security Update:https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes
https://learn.microsoft.com/en-us/azure/azure-arc/data/release-notes - FixedAzure Stack Edgemsrc_csaf
2.2.2088.5593:Security Update:https://learn.microsoft.com/en-us/azure/databox-online/azure-stack-edge-gpu-2209-release-notes
https://learn.microsoft.com/en-us/azure/databox-online/azure-stack-edge-gpu-2209-release-notes
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (25)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- msrc_CVE-2022-37968Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability2022-10-11csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-37968/cnnvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37968cnnvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37968cnnvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37968enisa_euvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37968nvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37968PatchVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan