Medium 6.5

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

CVE-2022-37959 First seen on SecPulse Sep 14, 2022

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
Microsoft	MicrosoftWindows Server 2019	≥ 10.0.17763.0, < 10.0.17763.3406→ 10.0.17763.3406	10.0.17763.3406
Microsoft	MicrosoftWindows Server 2019 (Server Core installation)	≥ 10.0.17763.0, < 10.0.17763.3406→ 10.0.17763.3406	10.0.17763.3406
Microsoft	MicrosoftWindows Server 2022	≥ 10.0.20348.0, < 10.0.20348.1006→ 10.0.20348.1006	10.0.20348.1006
Microsoft	MicrosoftWindows Server 2016	≥ 10.0.14393.0, < 10.0.14393.5356→ 10.0.14393.5356	10.0.14393.5356
Microsoft	MicrosoftWindows Server 2016 (Server Core installation)	≥ 10.0.14393.0, < 10.0.14393.5356→ 10.0.14393.5356	10.0.14393.5356
Microsoft	MicrosoftWindows Server 2012 R2	≥ 6.3.9600.0, < 6.3.9600.20571→ 6.3.9600.20571	6.3.9600.20571
Microsoft	MicrosoftWindows Server 2012 R2 (Server Core installation)	≥ 6.3.9600.0, < 6.3.9600.20571→ 6.3.9600.20571	6.3.9600.20571

References

• web msrc.microsoft.com