CVE-2022-33672 - Azure Site Recovery Elevation of Privilege Vulnerability

MEDIUM

Azure Site Recovery Elevation of Privilege Vulnerability

Published Jul 12, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 1.87%

Azure Site Recovery Elevation of Privilege Vulnerability

Vendor Microsoft Product Azure Site Recovery VMWare to Azure Default
unknown
Affected
- ≥ 9.0, < 9.49

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Azure Site Recovery VMWare to Azure	unknown	Affected ≥ 9.0, < 9.49

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36715		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33672		vendor-advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jul 12, 2022

Updated Jul 8, 2025

Reserved Jun 14, 2022

CISA Vulnrichment

Updated Sep 11, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jul 12, 2022

Updated Jul 8, 2025

GitHub

No data