Microsoft Patch Tuesday – August 2022

Patch Tuesday is once again upon us. The August 2022 edition of Patch Tuesday brings us 123 fixes, with 17 rated as critical. We’ve listed the most important changes below.

⚡ TL;DR | Go Straight to the August 2022 Patch Tuesday Audit Report

Windows Server 20H2 End-of-Life

Microsoft is ending support for the last Semi-annual release of Windows Server. These server versions were an attempt to mirror the Windows 10 versioning, with a new release twice per year. These versions received support for 18 months following their release. Windows Server 20H2 is the last Semi-annual release of Windows Server to hit its end-of-life date. You can find more info and a specific Windows Server EOL audit in the Windows Server EOL blog post.

Exchange Elevation of Privilege Vulnerabilities

Three of the 17 critical vulnerabilities are elevation of privilege vulnerabilities in Exchange. Exchange has been routinely getting security updates this year as more and more security flaws are discovered. Microsoft does mention in their official advisories that exploitation of these vulnerabilities is more likely.

CVE-2022-24477, CVE-2022-24516, and CVE-2022-21980 all have a CVSS base score of 8.0. In addition to installing the latest updates, Microsoft lists that: «Customers vulnerable to this issue would need to enable Extended Protection in order to prevent this attack. For more information, see Exchange Server Support for Windows Extended Protection«

Lastly, in addition to the critical vulnerabilities, another 3 information disclosure vulnerabilities were fixed in Exchange. CVE-2022-34692, CVE-2022-30134, and CVE-2022-21979. The vulnerabilities are much lower in severity and their CVSS base score ranges between 4.8 and 7.6.

Windows 11 SMB Client and Server RCE

Another critical vulnerability is exclusive to Windows 11. With a CVSS base score of 8.8, CVE-2022-35804 is likely to be exploited according to the official advisory.

An issue in the Microsoft Server Message Block 3.1.1 (SMBv3) protocol and how it handles certain requests allows attackers who successfully exploit the vulnerability to execute code on the target system. Since this can both occur on the client and server side, there are two attack vectors:

• For the vulnerability to be exploited on the SMB Client, an unauthenticated attacker would first need to configure a malicious SMBv3 server and convince a user to connect to it by enticing them to click a specially crafted link.
• For the vulnerability to be exploited on the SMB Server, an authenticated attacker could send specially crafted packets from an SMB Client to a targeted SMBv3 Server.

Aside from installing the update which is highly recommended. Microsoft does have additional mitigation options and ways to protect your network when an update cannot be performed quickly.

Run the Patch Tuesday August 2022 Audit Report

To help manage your update progress, we’ve created the Patch Tuesday Audit Report that checks if the assets in your network are on the latest patch updates. The report has been color-coded to see which machines are up-to-date and which ones still need to be updated. As always, system administrators are urged to update their environment as soon as possible to ensure all endpoints are secured.

The Lansweeper Patch Tuesday report is automatically added to Lansweeper Cloud sites. Lansweeper Cloud is included in all our licenses without any additional cost and allows you to federate all your installations into one single view so all you need to do is look at one report, automatically added every patch Tuesday!

Patch Tuesday August 2022 CVE Codes & Titles

Receive the Latest Patch Tuesday Report for FREE Every Month

"*" señala los campos obligatorios

Email*

This field is hidden when viewing the form

EmailType

This field is hidden when viewing the form

IM – Conv Page – Processing

This field is hidden when viewing the form

IM – UTM_Campaign FC – Processing

This field is hidden when viewing the form

IM – UTM_Campaign LC – Processing

This field is hidden when viewing the form

IM – UTM_Content FC – Processing

This field is hidden when viewing the form

IM – UTM_Content LC – Processing

This field is hidden when viewing the form

IM – UTM_Medium FC – Processing

This field is hidden when viewing the form

IM – UTM_Medium LC – Processing

This field is hidden when viewing the form

IM – UTM_Source FC – Processing

This field is hidden when viewing the form

IM – UTM_Source LC – Processing

This field is hidden when viewing the form

IM – UTM_Term FC – Processing

This field is hidden when viewing the form

IM – UTM_Term LC – Processing

This field is hidden when viewing the form

gclid

This field is hidden when viewing the form

msclkid

Comments

Este campo es un campo de validación y debe quedar sin cambios.

Count Me In Submit