RPC Microsoft Windows Network File System CVE-2022-30136 Remote Code Execution

Rule ID

1231393

Severity

Medium

Description

A remote code execution vulnerability exists in Windows Network File System. The vulnerability is due to improper handling of crafted NFSv4 requests.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

DoS attacks

IPS Anomaly Group

N/A

IPS Rule Default Action

Allow

References

Keywords

Windows Server 2012, Windows Server 2016, Windows Server 2019