OS-WINDOWS Microsoft Windows Remote Desktop client remote code execution attempt

IPS-CFW

2 SIDs: 59215, 66581

Description

Detects an attempt to exploit CVE-2022-23285, a remote code execution flaw that can run code on the target in Microsoft Windows Remote Desktop client.

CVEs

CVE-2022-23285 CVE-2026-42985

Related malware families

Microsoft

References

portal.msrc.microsoft.com