CVE-2022-37959

MediumCVSS 6.5

Published: 13/09/2022(UTC)Updated: 03/11/2026(UTC)Translated: 03/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.39%

84th percentile - higher than 84% of all known CVEs

Summary

A Security Feature Bypass Vulnerability in the Network Device Enrollment Service (NDES). The description does not include technical details of the vulnerability mechanism.

Risk Assessment

Bypassing security features may allow unauthorized actions within NDES, potentially affecting certificate management in the organization.

Recommendation

Apply available security updates for NDES and monitor for unusual device enrollment activity.

Other vulnerabilities in Network Device Enrollment Service (NDES)

CVE-2026-85323Medium
A weak authentication vulnerability in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. The issue involves an insufficient authentication mechanism.

Original NVD description (English source)

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS