CVE Catalog

CVE-2022-41056

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
1.93%

78th percentile - higher than 78% of all known CVEs

Summary

Denial of Service vulnerability in the RADIUS protocol in Windows Network Policy Server (NPS). An attacker could exploit this vulnerability to cause the service to crash.

Risk Assessment

The risk is that the NPS service may stop working, preventing RADIUS-based authentication and authorization, potentially disrupting network operations.

Recommendation

Apply the security updates provided by the vendor for Windows immediately.

Other vulnerabilities in Windows Network Policy Server

Original NVD description (English source)

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS