KLA12549
RCE vulnerability in Microsoft Windows

Обновлено: 16/05/2023

Дата обнаружения	30/05/2022
Уровень угрозы	High
Описание	A remote code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code.
Эксплуатация	The following public exploits exists for this vulnerability: https://github.com/flux10n/CVE-2022-30190 https://github.com/JMousqueton/PoC-CVE-2022-30190 https://github.com/onecloudemoji/CVE-2022-30190 https://github.com/2867a0/CVE-2022-30190 https://github.com/bytecaps/CVE-2022-30190 https://github.com/archanchoudhury/MSDT_CVE-2022-30190 https://github.com/rickhenderson/cve-2022-30190 https://github.com/DOV3Y/CVE-2022-30190-ASR-Senintel-Process-Pickup https://github.com/kdk2933/msdt-CVE-2022-30190 https://github.com/sentinelblue/CVE-2022-30190 https://github.com/aymankhder/MSDT_CVE-2022-30190-follina- https://github.com/trhacknon/CVE-2022-30190 https://github.com/PaddlingCode/cve-2022-30190 https://github.com/dwisiswant0/gollina https://github.com/hscorpion/CVE-2022-30190 https://github.com/drgreenthumb93/CVE-2022-30190-follina https://github.com/mitespsoc/CVE-2022-30190-POC https://github.com/Vaisakhkm2625/MSDT-0-Day-CVE-2022-30190-Poc https://github.com/rouben/CVE-2022-30190-NSIS https://github.com/Cosmo121/Follina-Remediation https://github.com/rayorole/CVE-2022-30190 https://github.com/ImproveCybersecurityJaro/2022_PoC-MSDT-Follina-CVE-2022-30190 https://github.com/sudoaza/CVE-2022-30190 https://github.com/gamingwithevets/msdt-disable https://github.com/ErrorNoInternet/FollinaScanner https://github.com/ITMarcin2211/CVE-2022-30190 https://github.com/derco0n/mitigate-folina https://github.com/komomon/CVE-2022-30190-follina-Office-MSDT-Fixed https://github.com/gyaansastra/CVE-2022-30190 https://github.com/swaiist/CVE-2022-30190-Fix https://github.com/suegdu/CVE-2022-30190-Follina-Patch https://github.com/castlesmadeofsand/ms-msdt-vulnerability-pdq-package https://github.com/WesyHub/CVE-2022-30190—Follina—Poc-Exploit https://github.com/AchocolatechipPancake/MS-MSDT-Office-RCE-Follina https://github.com/Noxtal/follina https://github.com/droidrzrlover/CVE-2022-30190 https://github.com/hilt86/cve-2022-30190-mitigate https://github.com/SrikeshMaharaj/CVE-2022-30190 https://github.com/DerZiad/CVE-2022-30190 https://github.com/tej7gandhi/CVE-2022-30190-Zero-Click-Zero-Day-in-msdt https://github.com/ItsNee/Follina-CVE-2022-30190-POC https://github.com/IamVSM/msdt-follina https://github.com/Rojacur/FollinaPatcherCLI https://github.com/joshuavanderpoll/CVE-2022-30190 https://github.com/abhirules27/Follina https://github.com/dsibilio/follina-spring https://github.com/Malwareman007/Deathnote https://github.com/sentrium-security/Follina-Workaround-CVE-2022-30190 https://github.com/Hrishikesh7665/Follina_Exploiter_CLI https://github.com/Evelinjohn32/Cve-2022-30190 https://github.com/aminetitrofine/CVE-2022-30190 https://github.com/kevinsmith96/Cve-2022-30190 https://github.com/ToxicEnvelope/FOLLINA-CVE-2022-30190 https://github.com/dianaross20/Cve-2022-30190 https://github.com/Gra3s/CVE-2022-30190_PowerPoint https://github.com/Mileyadams26/Cve-2022-30190 https://github.com/doocop/CVE-2022-30190 https://github.com/melting0256/Enterprise-Cybersecurity https://github.com/nanaao/PicusSecurity4.Week.Repo https://github.com/Gra3s/CVE-2022-30190_EXP_PowerPoint https://github.com/michealadams30/Cve-2022-30190 https://github.com/meowhua15/CVE-2022-30190 https://github.com/Lucaskrell/go_follina https://github.com/3barz/Follina_Vagrant Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Пораженные продукты	Windows 10 Version 20H2 for ARM64-based Systems Windows Server 2019 (Server Core installation) Windows 10 Version 20H2 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 8.1 for 32-bit systems Windows 10 Version 21H1 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2012 R2 Windows Server, version 20H2 (Server Core Installation) Windows Server 2016 Windows Server 2019 Windows 10 Version 21H2 for 32-bit Systems Windows Server 2012 (Server Core installation) Windows 10 for x64-based Systems Windows Server 2016 (Server Core installation) Windows 10 Version 21H1 for ARM64-based Systems Windows RT 8.1 Windows Server 2022 Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows Server 2022 (Server Core installation) Windows 11 for ARM64-based Systems Windows 11 for x64-based Systems Windows 10 for 32-bit Systems Windows Server 2012 Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows 8.1 for x64-based systems Windows 10 Version 1607 for x64-based Systems Windows Server 2012 R2 (Server Core installation) Windows 10 Version 20H2 for 32-bit Systems Windows Server 2022 Azure Edition Core Hotpatch Microsoft Windows Support Diagnostic Tool (MSDT)
Решение	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Первичный источник обнаружения	CVE-2022-30190
Оказываемое влияние ?	ACE [?]
Связанные продукты	Microsoft Windows Microsoft Windows Server Microsoft Windows Server 2012 Microsoft Windows 8 Windows RT Microsoft Windows 10 Microsoft Azure Microsoft Windows Server 2016 Microsoft Windows Server 2019
CVE-IDS	CVE-2022-301909.3Critical