Description
Windows网络文件系统存在远程代码执行漏洞，这是未正确处理NFSv4请求导致的。
Microsoft Windows NFS CVE-2022-34715 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-34715
https://nvd.nist.gov/vuln/detail/cve-2022-34715
https://www.thezdi.com/blog/2022/8/31/cve-2022-34715-more-microsoft-windows-nfs-v4-remote-code-execution
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.NFS:OVERFLOW:MICROSOFT-NFS-RCE.html
https://github.com/ycdxsb/WindowsPrivilegeEscalation
https://www.51cto.com/article/716803.html
https://www.anquanke.com/post/id/277767
https://cn-sec.com/archives/1301569.html
https://avleonov.com/2022/08/23/microsoft-patch-tuesday-august-2022-dogwalk-exchange-eops-13-potentially-dangerous-2-funny-3-mysterious-vulnerabilities/
https://www.4hou.com/posts/nJqp
https://resources.k7computing.com/wp-content/uploads/2022/10/K7-Cyber-Threat-Monitor-Report-Q2-2022-23.pdf
https://autoupdate.ngfw.forcepoint.com/download/dynup/sgpkg-1983-SUMMARY.html
https://www.linkedin.com/posts/armscyber_armscyber-resilience-stealthposturemanagement-activity-7447631675120922624-yWlM
https://www.threatdown.com/blog/update-now-patch-tuesday-august-2022/