Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-38023

30
FAUCET Score

CVE-2022-38023 is a Netlogon RPC Elevation of Privilege vulnerability affecting Microsoft, Samba, NetApp, and Fedora Project products. This high-severity vulnerability (CVSS 8.1) allows for remote, unauthenticated attacks with high impact on confidentiality, integrity, and availability, though it requires high attack complexity. While not currently listed in CISA's KEV catalog or having public exploit code, the vulnerability has garnered significant community discussion (over 99% of all CVEs) and media coverage, indicating awareness and potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
r2CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
r2CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.42%
Probability of exploitation in next 30 days
EPSS Percentile
82.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0242 is in the 39th percentile among its peer group of 8,918 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (32)

githubpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 R2 (Server Core installation)Fixed in: 6.3.9600.21075
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for 32-bit Systems Service Pack 2Fixed in: 6.0.6003.22175
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)Fixed in: 6.0.6003.22175
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for x64-based Systems Service Pack 2Fixed in: 6.0.6003.22175
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)Fixed in: 6.0.6003.22175
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1Fixed in: 6.1.7601.26623
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Fixed in: 6.1.7601.26623
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012Fixed in: 6.2.9200.24374
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 (Server Core installation)Fixed in: 6.2.9200.24374
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 R2Fixed in: 6.3.9600.21063
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 R2 (Server Core installation)Fixed in: 6.3.9600.21063
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 R2Fixed in: 6.3.9600.21075
View patch
microsoftpatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2019Fixed in: 10.0.17763.4645
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2019 (Server Core installation)Fixed in: 10.0.17763.4645
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2022Fixed in: 10.0.20348.1850
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2022 (Server Core installation)Fixed in: 10.0.20348.1850
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2016Fixed in: 10.0.14393.6085
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2016 (Server Core installation)Fixed in: 10.0.14393.6085
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: samba-0:4.16.4-4.el8_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: samba-0:4.10.4-107.el8_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: samba-0:4.11.2-22.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: samba-0:4.11.2-22.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: samba-0:4.11.2-22.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: samba-0:4.13.3-11.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: samba-0:4.15.5-12.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: samba-0:4.16.4-103.el9_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: samba-0:4.15.5-110.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8Fixed in: samba-0:4.15.5-12.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8Fixed in: redhat-virtualization-host-0:4.5.3-202306050942_8.6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: samba-0:4.10.16-24.el7_9
View patch

Vendor Advisories (3)

githubllm-github-7b01785620b8812fMEDIUM

AS-2022-017: Samba

Feb 20, 2023
redhatCVE-2022-38023Important

samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided

Dec 16, 2022
microsoft2022-Nov/CVE-2022-38023Important

Netlogon RPC Elevation of Privilege Vulnerability

Nov 8, 2022

References

security.gentoo.org / glsa/202309-06
Third Party Advisory
msrc.microsoft.com / update-guide/vulnerability/CVE-2022-38023
PatchVendor Advisory