{"affected":[{"platforms":["x64-based Systems"],"product":"Windows Server 2019","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.3406","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.3406","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.1006","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.5356","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.5356","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.20571","status":"affected","version":"6.3.9600.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2 (Server Core installation)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.20571","status":"affected","version":"6.3.9600.0","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2022-37959","cwes":[],"description":"Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability","epss":{"date":"2026-11-03","percentile":0.84001,"score":0.02394},"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: microsoft","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: secure@microsoft.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793733461897,"publishedAt":1663094528000,"references":[{"source":"CNA: microsoft","tags":["vendor-advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37959"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37959"},{"source":"secure@microsoft.com","tags":[],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37959"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37959"}],"remediation":[],"revision":"c3cf88c189c9ea0b6dfc262926cab3217e5330025dd225d0fe55663cde1de0b6","sources":[{"modifiedAt":1793730827026,"name":"CNA: microsoft","retrievedAt":1793732899347,"url":"https://www.cve.org/CVERecord?id=CVE-2022-37959"},{"modifiedAt":1793733461897,"name":"NVD","retrievedAt":1793751347274,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37959"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793732931332,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-37959"}],"ssvc":{"assessedAt":1717461803701,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability","updatedAt":1793751347274}