SMB: Microsoft Windows NEGOEX Buffer Overflow
This signature detects attempts to exploit a known vulnerability against Microsoft Windows NEGOEX. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the Microsoft Windows NEGOEX.
Extended Description
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Affected Products
Microsoft windows_10
References
CVE: CVE-2022-37958
Short Name
SMB:OF:MS-NEGOEX-BO
Severity
Major
Recommended
True
Recommended Action
None
Category
SMB
Keywords
Buffer CVE-2022-37958 Microsoft NEGOEX Overflow Windows
Release Date
01/30/2023
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3805
False Positive
Unknown
Vendors
Microsoft