Microsoft Patch Tuesday – October 2022

Patch Tuesday is once again upon us. The October 2022 edition of Patch Tuesday brings us 89 fixes, with 13 rated as critical. We’ve listed the most important changes below.

⚡ TL;DR | Go Straight to the October 2022 Patch Tuesday Audit Report

Microsoft SharePoint Server RCE Vulnerability

One of the most critical vulnerabilities is in Sharepoint. CVE-2022-41038 received a CVSS base score of 8.8. Luckily, an attacker must both be authenticated to the target site and also have permission to access and use the Manage List within Sharepoint. The exploitation of this vulnerability could allow attackers to execute code remotely on your SharePoint servers.

Microsoft lists that luckily the vulnerability is not being actively exploited yet, but stresses that exploitation is likely, so best to update your SharePoint servers as soon as possible.

Additionally, three less severe vulnerabilities were also fixed for SharePoint. CVE-2022-41037, CVE-2022-41036, and CVE-2022-38053 are all three RCE vulnerabilities with a CVSS score of 8.8. However, Microsoft doesn’t rate them as critical.

Windows Point-to-Point Tunneling Protocol RCE

A staggering 7 of the critical vulnerabilities are in the Windows point-to-point tunneling protocol. All received a CVSS base score of 8.1.

• CVE-2022-41081
• CVE-2022-38047
• CVE-2022-38000
• CVE-2022-33634
• CVE-2022-30198
• CVE-2022-24504
• CVE-2022-22035

Microsofts comments that for an attacker to exploit the vulnerability, they would need to send a specially crafted malicious PPTP packet to a PPTP server. If successful attackers are able to remotely execute code on the target machine.

Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability

The last major vulnerability is in the cluster connect feature of Azure Arc-enabled Kubernetes clusters. Because the Azure Stack Edge allows users to deploy Kubernetes workloads on devices via Azure Arc, Azure Stack Edge devices are also deemed as vulnerable.

CVE-2022-37968 received a max CVSS base score of 10, and while Microsoft doesn’t list exploitability as likely, the ease of exploitation does make it a high priority if you’re using the cluster connect feature. Microsoft added additional guidance in their security center.

“An attacker who knows the randomly generated external DNS endpoint for an Azure Arc-enabled Kubernetes cluster can exploit this vulnerability from the internet. Successful exploitation of this vulnerability, which affects the cluster connect feature of Azure Arc-enabled Kubernetes clusters, allows an unauthenticated user to elevate their privileges as cluster admins and potentially gain control over the Kubernetes cluster.”

Microsoft

Run the Patch Tuesday October 2022 Audit Report

To help manage your update progress, we’ve created the Patch Tuesday Audit Report that checks if the assets in your network are on the latest patch updates. The report has been color-coded to see which machines are up-to-date and which ones still need to be updated. As always, system administrators are urged to update their environment as soon as possible to ensure all endpoints are secured.

The Lansweeper Patch Tuesday report is automatically added to Lansweeper Cloud sites. Lansweeper Cloud is included in all our licenses without any additional cost and allows you to federate all your installations into one single view so all you need to do is look at one report, automatically added every patch Tuesday!

Patch Tuesday October 2022 CVE Codes & Titles

Receive the Latest Patch Tuesday Report for FREE Every Month

"*" indicates required fields

Email*

This field is hidden when viewing the form

EmailType

This field is hidden when viewing the form

IM – Conv Page – Processing

This field is hidden when viewing the form

IM – UTM_Campaign FC – Processing

This field is hidden when viewing the form

IM – UTM_Campaign LC – Processing

This field is hidden when viewing the form

IM – UTM_Content FC – Processing

This field is hidden when viewing the form

IM – UTM_Content LC – Processing

This field is hidden when viewing the form

IM – UTM_Medium FC – Processing

This field is hidden when viewing the form

IM – UTM_Medium LC – Processing

This field is hidden when viewing the form

IM – UTM_Source FC – Processing

This field is hidden when viewing the form

IM – UTM_Source LC – Processing

This field is hidden when viewing the form

IM – UTM_Term FC – Processing

This field is hidden when viewing the form

IM – UTM_Term LC – Processing

This field is hidden when viewing the form

gclid

This field is hidden when viewing the form

msclkid

Email

This field is for validation purposes and should be left unchanged.

Count Me In Submit