CVE:CVE-2022-35794
CNNVD:CNNVD-202208-2512
Microsoft Windows Secure Socket Tunneling Protocol是美国微软（Microsoft）公司的一种通过 HTTPS 协议封装点对点协议 (PPP) 流量的机制，如[RFC1945]、[RFC2616]和[RFC2818]中所指定。该协议使用户能够使用 HTTPS 访问专用网络。使用 HTTPS 可以穿越大多数防火墙和 Web 代理。
Microsoft Windows Secure Socket Tunneling Protocol (SSTP)存在安全漏洞。以下产品和版本受到影响：Windows Server 2022 (Server Core installation),Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022
solution:Upgrade microsoft windows_10 to a higher version than 20h2,21h1,21h2,1809,and avoid the version 20h2,21h1,21h2,1809; Upgrade microsoft windows_11 to a higher version than -; Upgrade microsoft windows_server_2016 to a higher version than 20h2,and avoid the version 20h2; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -