Skip to content
OpenAdvisories
High 1 exploited CVE MSRC-CVE-2022-30190 1 CVE

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Published May 10, 2022 · Updated Jun 14, 2022 · Revision 3

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

Details

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.
For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.

Is there an update available to address this vulnerability?
Yes, the updates are available. Microsoft recommends installing the June updates as soon as possible.
Please see this MSRC Blog Entry.

Security updates
10.0.17763.3046 — https://support.microsoft.com/help/5014692
10.0.19043.1766 — https://support.microsoft.com/help/5014699
10.0.20348.770 — https://support.microsoft.com/help/5014678
10.0.22000.739 — https://support.microsoft.com/help/5014697
10.0.10240.19325 — https://support.microsoft.com/help/5014710
10.0.14393.5192 — https://support.microsoft.com/help/5014702
6.1.7601.25984 — https://support.microsoft.com/help/5014748
6.1.7601.25984 — https://support.microsoft.com/help/5014742
6.3.9600.20402 — https://support.microsoft.com/help/5014738
6.3.9600.20402 — https://support.microsoft.com/help/5014746
6.2.9200.23736 — https://support.microsoft.com/help/5014747
6.2.9200.23736 — https://support.microsoft.com/help/5014741

Vulnerabilities 1

Revision history

  1. #3

    The update for this vulnerability is in the June 2022 cumulative Windows Updates. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.

  2. #2

    Added an FAQ. This is an information change only.

  3. #1

    Information published.

References