2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-34713" ,
"sourceIdentifier" : "secure@microsoft.com" ,
"published" : "2022-08-09T20:15:11.487" ,
2025-02-18 17:05:00 +00:00
"lastModified" : "2025-02-18T15:06:15.647" ,
"vulnStatus" : "Analyzed" ,
2024-06-28 16:04:01 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
2023-05-31 20:00:31 +00:00
"value" : "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability"
2023-04-24 12:24:31 +02:00
} ,
{
"lang" : "es" ,
"value" : "Una vulnerabilidad de Ejecuci\u00f3n de C\u00f3digo Remota en Microsoft Windows Support Diagnostic Tool (MSDT). Este ID de CVE es diferente de CVE-2022-35743"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "secure@microsoft.com" ,
2025-01-12 03:03:49 +00:00
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
}
]
} ,
2024-12-08 03:06:42 +00:00
"cisaExploitAdd" : "2022-08-09" ,
"cisaActionDue" : "2022-08-30" ,
"cisaRequiredAction" : "Apply updates per vendor instructions." ,
"cisaVulnerabilityName" : "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability" ,
2023-04-24 12:24:31 +02:00
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.10240.19387" ,
"matchCriteriaId" : "277405AA-FD3E-4D9C-A517-699DACC4C73A"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.14393.5291" ,
"matchCriteriaId" : "CA14A226-5C8E-47C6-A01B-59696B55E725"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.17763.3287" ,
"matchCriteriaId" : "E10FB53B-BB2F-4EE5-B8CA-3C382A844EA5"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.19042.1889" ,
"matchCriteriaId" : "85213B81-17AA-49D6-9CCD-FF760D4DA598"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:arm64:*" ,
"versionEndExcluding" : "10.0.19043.1889" ,
"matchCriteriaId" : "CB0CF625-97ED-4985-AA28-9D3110AD9CFB"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.19044.1889" ,
"matchCriteriaId" : "4F8DCD6B-C358-48DE-B39C-99432DD427E3"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.22000.856" ,
"matchCriteriaId" : "AEAAF664-B70D-4228-B962-5D0AD81DD066"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*" ,
"matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*" ,
"matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*" ,
"matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*" ,
"matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" ,
"matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.14393.5291" ,
"matchCriteriaId" : "1839B33E-0EC7-4B78-8D34-0EAC2F934B82"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.17763.3287" ,
"matchCriteriaId" : "898EEB05-FF57-4D96-B745-B3EF23CCFCC3"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.20348.887" ,
"matchCriteriaId" : "F780FD60-3B7C-4590-95F5-A66FECCE3157"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-06-28 16:04:01 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.0.19042.1889" ,
"matchCriteriaId" : "7FA7AAE5-2F90-4C7D-9607-0DFC65F52260"
2023-04-24 12:24:31 +02:00
}
]
}
]
}
] ,
"references" : [
{
2023-05-31 20:00:31 +00:00
"url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713" ,
2024-06-28 16:04:01 +00:00
"source" : "secure@microsoft.com" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}