« Back to list

CVE-2022-32230

Status: ModifiedHigh (7.5)—

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (3)

Microsoft — Windows 10Microsoft — Windows 11Microsoft — Windows Server 2019

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2022-32230",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@rapid7.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@rapid7.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 20H2",
          "versions": [
            {
              "status": "affected",
              "version": "19042.1706",
              "lessThan": "19042.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19043.1706",
              "lessThan": "19043.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19044.1706",
              "lessThan": "19043.1706",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server Version 20H2",
          "versions": [
            {
              "status": "affected",
              "version": "19042.1706",
              "lessThan": "19042.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19043.1706",
              "lessThan": "19043.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19044.1706",
              "lessThan": "19044.1706",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 21H1",
          "versions": [
            {
              "status": "affected",
              "version": "19042.1706",
              "lessThan": "19042.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19043.1706",
              "lessThan": "19043.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19044.1706",
              "lessThan": "19044.1706",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 21H2",
          "versions": [
            {
              "status": "affected",
              "version": "19042.1706",
              "lessThan": "19042.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19043.1706",
              "lessThan": "19043.1706",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "19044.1706",
              "lessThan": "19044.1706",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-06-14T22:15:10.450",
  "references": [
    {
      "url": "https://github.com/zeroSteiner/metasploit-framework/blob/feat/mod/cve-2022-32230/modules/auxiliary/dos/smb/smb_filenormalizednameinformation.rb",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@rapid7.com"
    },
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-32230",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@rapid7.com"
    },
    {
      "url": "https://support.microsoft.com/en-us/topic/may-10-2022-kb5013942-os-builds-19042-1706-19043-1706-and-19044-1706-60b51119-85be-4a34-9e21-8954f6749504",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@rapid7.com"
    },
    {
      "url": "https://www.rapid7.com/blog/post/2022/06/14/cve-2022-32230-windows-smb-denial-of-service-vulnerability-fixed/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@rapid7.com"
    },
    {
      "url": "https://github.com/zeroSteiner/metasploit-framework/blob/feat/mod/cve-2022-32230/modules/auxiliary/dos/smb/smb_filenormalizednameinformation.rb",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-32230",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.microsoft.com/en-us/topic/may-10-2022-kb5013942-os-builds-19042-1706-19043-1706-and-19044-1706-60b51119-85be-4a34-9e21-8954f6749504",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.rapid7.com/blog/post/2022/06/14/cve-2022-32230-windows-smb-denial-of-service-vulnerability-fixed/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@rapid7.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot."
    },
    {
      "lang": "es",
      "value": "Microsoft Windows SMBv3, sufre una desreferencia de puntero null en las versiones de Windows anteriores al conjunto de parches de abril de 2022. Al enviar una petición SMBv3 FileNormalizedNameInformation malformada a través de una tubería con nombre, un atacante puede causar un bloqueo de Pantalla Azul de la Muerte (BSOD) del kernel de Windows. Para la mayoría de los sistemas, este ataque requiere autenticación, excepto en el caso especial de los controladores de dominio de Windows, donde los usuarios no autenticados siempre pueden abrir tuberías con nombre mientras puedan establecer una sesión SMB. Normalmente, tras el BSOD, el servidor SMBv3 víctima es reiniciado"
    }
  ],
  "lastModified": "2026-06-17T04:46:56.117",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E2C378B-1507-4C81-82F6-9F599616845A"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAE4278F-71A7-43E9-8F79-1CBFAE71D730"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5200AF17-0458-4315-A9D6-06C8DF67C05B"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@rapid7.com"
}