CVE:CVE-2022-24508
CNNVD:CNNVD-202203-661
Microsoft SMBv3是美国微软（Microsoft）公司的一个为设备提供SMB功能的支持固件。
Microsoft SMBv3 Client/Server 存在代码注入漏洞。以下产品和版本受到影响：Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows Server 2022 Azure Edition Core Hotpatch,Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems。
solution:Upgrade microsoft windows_10 to a higher version than 20h2,21h1,21h2,and avoid the version 20h2,21h1,21h2; Upgrade microsoft windows_11 to a higher version than -; Upgrade microsoft windows_server to a higher version than 20h2,and avoid the version 20h2; Upgrade microsoft windows_server_2022 to a higher version than -