Details of VAR-202208-0758

ID

VAR-202208-0758

CVE

CVE-2022-34713

TITLE

plural Microsoft Windows Remote code execution vulnerability in product

Trust: 0.8

sources: JVNDB: JVNDB-2022-002234

DESCRIPTION

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability. This vulnerability is CVE-2022-35743 Is a different vulnerability.It is possible to execute code remotely. Microsoft Windows Support Diagnostic Tool (MSDT)存在安全漏洞。以下产品和版本受到影响：Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation),Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows Server 2012,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows 7 for 32-bit Systems Service Pack 1,Windows 7 for x64-based Systems Service Pack 1,Windows 8.1 for 32-bit systems,Windows 8.1 for x64-based systems,Windows RT 8.1,Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Trust: 2.16

sources: NVD: CVE-2022-34713 // JVNDB: JVNDB-2022-002234 // CNNVD: CNNVD-202208-2544

AFFECTED PRODUCTS

vendor:	microsoft	model:	windows 10 1607	scope:	lt	version:	10.0.14393.5291	Trust: 1.0
vendor:	microsoft	model:	windows rt 8.1	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows server 2016	scope:	lt	version:	10.0.14393.5291	Trust: 1.0
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows 10 20h2	scope:	lt	version:	10.0.19042.1889	Trust: 1.0
vendor:	microsoft	model:	windows 7	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows server 2008	scope:	eq	version:	r2	Trust: 1.0
vendor:	microsoft	model:	windows 10 1507	scope:	lt	version:	10.0.10240.19387	Trust: 1.0
vendor:	microsoft	model:	windows 8.1	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows server 2019	scope:	lt	version:	10.0.17763.3287	Trust: 1.0
vendor:	microsoft	model:	windows 10 1809	scope:	lt	version:	10.0.17763.3287	Trust: 1.0
vendor:	microsoft	model:	windows 10 21h2	scope:	lt	version:	10.0.19044.1889	Trust: 1.0
vendor:	microsoft	model:	windows 10 21h1	scope:	lt	version:	10.0.19043.1889	Trust: 1.0
vendor:	microsoft	model:	windows server 20h2	scope:	lt	version:	10.0.19042.1889	Trust: 1.0
vendor:	microsoft	model:	windows 11 21h2	scope:	lt	version:	10.0.22000.856	Trust: 1.0
vendor:	microsoft	model:	windows server 2022	scope:	lt	version:	10.0.20348.887	Trust: 1.0
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	r2	Trust: 1.0
vendor:	マイクロソフト	model:	microsoft windows server 2008	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server 2019	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2012	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2016	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows 11	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2012 (server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server 2022	scope:	eq	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2019 (server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2012 r2 (server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2008 r2 for x64-based systems sp1 (server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows 8.1	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2012 r2	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2022 (server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows 7	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2022	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server 2022	scope:	eq	version:	(server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows 10	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2019	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows rt 8.1	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server 2016	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	20h2 (server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server 2012	scope:	-	version:	-	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2016 (server core installation)	Trust: 0.8
vendor:	マイクロソフト	model:	microsoft windows server	scope:	eq	version:	2008 r2 for x64-based systems sp1	Trust: 0.8

sources: JVNDB: JVNDB-2022-002234 // NVD: CVE-2022-34713

CVSS

SEVERITY

CVSSV2

CVSSV3

secure@microsoft.com:	CVE-2022-34713
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2022-002234
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202208-2544
value:	HIGH
Trust: 0.6

secure@microsoft.com:
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2022-002234
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2022-002234 // CNNVD: CNNVD-202208-2544 // NVD: CVE-2022-34713

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-002234 // NVD: CVE-2022-34713

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202208-2544

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202208-2544

CONFIGURATIONS

sources: NVD: CVE-2022-34713

PATCH

title:	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Security Update Guide	url:	https://msrc.microsoft.com/update-guide/en-us/vulnerability/cve-2022-34713	Trust: 0.8
title:	Microsoft Windows Support Diagnostic Tool Security vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqbyid.tag?id=239753	Trust: 0.6

sources: JVNDB: JVNDB-2022-002234 // CNNVD: CNNVD-202208-2544

EXTERNAL IDS

db:	NVD	id:	CVE-2022-34713	Trust: 3.2
db:	JVNDB	id:	JVNDB-2022-002234	Trust: 0.8
db:	CNNVD	id:	CNNVD-202208-2544	Trust: 0.6

sources: JVNDB: JVNDB-2022-002234 // CNNVD: CNNVD-202208-2544 // NVD: CVE-2022-34713

REFERENCES

url:	https://msrc.microsoft.com/update-guide/vulnerability/cve-2022-34713	Trust: 2.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-34713	Trust: 0.8
url:	https://www.ipa.go.jp/security/ciadr/vul/20220810-ms.html	Trust: 0.8
url:	https://www.jpcert.or.jp/at/2022/at220021.html	Trust: 0.8
url:	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-34713	Trust: 0.6
url:	https://vigilance.fr/vulnerability/microsoft-windows-vulnerabilities-of-august-2022-39030	Trust: 0.6
url:	https://cxsecurity.com/cveshow/cve-2022-34713/	Trust: 0.6

sources: JVNDB: JVNDB-2022-002234 // CNNVD: CNNVD-202208-2544 // NVD: CVE-2022-34713

CREDITS

Imre Rad

Trust: 0.6

sources: CNNVD: CNNVD-202208-2544

SOURCES

db:	JVNDB	id:	JVNDB-2022-002234
db:	CNNVD	id:	CNNVD-202208-2544
db:	NVD	id:	CVE-2022-34713

LAST UPDATE DATE

2024-06-28T23:12:49.236000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2022-002234	date:	2022-08-18T02:25:00
db:	CNNVD	id:	CNNVD-202208-2544	date:	2023-06-01T00:00:00
db:	NVD	id:	CVE-2022-34713	date:	2024-06-28T14:13:04.940

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2022-002234	date:	2022-08-18T00:00:00
db:	CNNVD	id:	CNNVD-202208-2544	date:	2022-08-09T00:00:00
db:	NVD	id:	CVE-2022-34713	date:	2022-08-09T20:15:11.487