What is CVE-2022-21907?

CVE-2022-21907 is a critical security vulnerability affecting the HTTP Protocol Stack in Microsoft Windows 10, Windows 11, and Windows Server operating systems. This remote code execution vulnerability allows an unauthenticated attacker to execute arbitrary code on the affected system by sending a specially crafted packet to a targeted server. Due to its severity and potential impact on various systems, addressing this vulnerability should be a priority for organizations.

Who is impacted by this?

The CVE-2022-21907 vulnerability affects users of Microsoft Windows operating systems, specifically Windows 10, Windows 11, and Windows Server versions. The impacted versions include Windows 10 (20H2, 21H1, 21H2, and 1809), Windows 11, and Windows Server (20H2, 2022, and 2019). This critical security issue can potentially impact a wide range of systems, making it essential for organizations to address it promptly.

What should I do if I’m affected by this?

If you're affected by the CVE-2022-21907 vulnerability, it's crucial to take action to secure your systems. Here's a simplified step-by-step guide:

1. Check if your system is affected by referring to the list of impacted Windows versions.

2. Apply the security updates provided by Microsoft for the affected systems. Visit the Microsoft Security Update Guide for more information.

3. For Windows Server 2019 and Windows 10 version 1809, delete the DWORD registry value "EnableTrailerSupport" if present under: HKEY\_LOCAL\_MACHINE\\System\\CurrentControlSet\\Services\\HTTP\\Parameters.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-21907 vulnerability, also known as the HTTP Protocol Stack Remote Code Execution Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was published on January 11, 2022, and users are advised to apply security updates provided by Microsoft to mitigate the vulnerability. For certain Windows versions, additional registry modifications may be required.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-Insufficient Information, indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For comprehensive information on the vulnerability, consult the NVD page and the sources listed below.

• NVD - CVE-2022-21907

• Microsoft HTTP Protocol Stack Denial Of Service

• Microsoft Security Update Guide - CVE-2022-21907

• CVE Record | CVE