High severity7.5NVD Advisory· Published Jun 14, 2022· Updated Jun 17, 2026
CVE-2022-32230
CVE-2022-32230
Description
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
19042.1706+ 1 more
- (no CPE)range: 19042.1706
- (no CPE)range: 19042.1706
- Range: 19042.1706
- Range: 19042.1706
Patches
Vulnerability mechanics
References
4- msrc.microsoft.com/update-guide/vulnerability/CVE-2022-32230nvdPatchVendor Advisory
- support.microsoft.com/en-us/topic/may-10-2022-kb5013942-os-builds-19042-1706-19043-1706-and-19044-1706-60b51119-85be-4a34-9e21-8954f6749504nvdPatchVendor Advisory
- github.com/zeroSteiner/metasploit-framework/blob/feat/mod/cve-2022-32230/modules/auxiliary/dos/smb/smb_filenormalizednameinformation.rbnvdExploitThird Party Advisory
- www.rapid7.com/blog/post/2022/06/14/cve-2022-32230-windows-smb-denial-of-service-vulnerability-fixed/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.