OnlyFm252
Azure Arc

CVE-2022-37968 — Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability

Critical CVSS 10 EPSS 0.02591 2022-10 archive

Executive Summary

Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.

Overview

10
CVSS CRITICAL
Critical
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Elevation of Privilege
Released Oct 11 2022
Last Updated Oct 11 2022
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.02591 — 0.8328 percentile

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Changed
Temporal Score: 8.7

EPSS Score

0.02591
probability of exploitation in the next 30 days
0.8328 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

5 affected products
Product KB Article Severity Impact Restart Required
Azure Arc-enabled Kubernetes cluster 1.5.8 Release Notes (Security Update) Critical Elevation of Privilege Maybe
Azure Arc-enabled Kubernetes cluster 1.6.19 Release Notes (Security Update) Critical Elevation of Privilege Maybe
Azure Arc-enabled Kubernetes cluster 1.7.18 Release Notes (Security Update) Critical Elevation of Privilege Maybe
Azure Arc-enabled Kubernetes cluster 1.8.11 Release Notes (Security Update) Critical Elevation of Privilege Maybe
Azure Stack Edge Release Notes (Security Update) Critical Elevation of Privilege Maybe

Patches

1 patch
Article Type Restart
Release Notes Security Update Maybe

Known Exploits

Acknowledgments

Mo Khan with Microsoft, Mo Khan with Microsoft

On This Page