# MA-864.092022: MyCERT Advisory - Microsoft Releases Out-of-Band Security Update for Microsoft Endpoint Configuration Manager

**Date:** 23 Sep 2022  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-864.092022  
**Advisory ID:** MA-864.092022

---

**1.0 Introduction**
Recently, Microsoft released a security update to address a vulnerability in Microsoft Endpoint Configuration Manager, versions 2103-2207.
**2.0 Impact**
An attacker could exploit this vulnerability to obtain sensitive information.
**3.0 Affected Products**
The affected Microsoft product is:
• Microsoft Endpoint Configuration Manager
**4.0 Recommendations**
Users and administrators to review Microsoft’s Security Advisory for CVE-2022-37972 and apply the necessary updates. Kindly refer to the following URL:
• <https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37972>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
• <https://www.cisa.gov/uscert/ncas/current-activity/2022/09/21/microsoft-releases-out-band-security-update-microsoft-endpoint>
• <https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37972>