CVE-2022-37971
highpriority · track · 0EPSS 0.007 · 52 %ileDEEURUUSEPSS · scored 2026-10-21
Microsoft Windows Defender Elevation of Privilege Vulnerability
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRUGGEDCOM CROSSBOWsiemens_psirt
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/ - FixedMicrosoft Malware Protection Enginemsrc_csaf
1.1.19700.2:Security Update:https://www.microsoft.com/en-us/wdsi/defenderupdates
https://www.microsoft.com/en-us/wdsi/defenderupdates - FixedRUGGEDCOM CROSSBOWcisa_csaf_ot
Update to V5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109822716/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–7.1
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (8)
Products and version ranges known to be affected.
- microsoft malware protection engine< 1.1.19700.2nvdUScpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*
advisories (3)
Vendor and ecosystem advisories describing this.
- SSA-472630SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.42023-08-08csaf · siemens_psirtDE
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the application's file system. Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
- msrc_CVE-2022-37971Microsoft Windows Defender Elevation of Privilege Vulnerability2022-10-11csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
- ICSA-23-222-05Siemens RUGGEDCOM CROSSBOW2023-08-08icsa · cisa_csaf_otUS
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the application's file system. Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-37971/cnnvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37971cnnvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37971cnnvd
- https://www.withsecure.com/en/support/security-advisories/cve-2022-37971cnnvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37971enisa_euvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37971nvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37971PatchVendor Advisorynvd
- https://www.withsecure.com/en/support/security-advisories/cve-2022-37971nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan