CVE-2022-21925

Published: Jan 11, 2022

Modified: Jan 2, 2025

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

Vendor	Product	Versions
Microsoft	Windows 7	affected `6.1.0 - < 6.1.7601.25829`
Microsoft	Windows 7 Service Pack 1	affected `6.1.0 - < 6.1.7601.25829`
Microsoft	Windows Server 2008 Service Pack 2	affected `6.0.6003.0 - < 6.0.6003.21349`
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	affected `6.0.6003.0 - < 6.0.6003.21349`
Microsoft	Windows Server 2008 Service Pack 2	affected `6.0.6003.0 - < 6.0.6003.21349`
Microsoft	Windows Server 2008 R2 Service Pack 1	affected `6.1.7601.0 - < 6.1.7601.25829`
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	affected `6.1.7601.0 - < 6.1.7601.25829`

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.