Vulnerability Details : CVE-2022-30216

Windows Server Service Tampering Vulnerability

Published 2022-07-12 23:15:12

Updated 2023-05-17 17:15:14

Source Microsoft Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-30216

Probability of exploitation activity in the next 30 days: 80.60%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2022-30216

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	[email protected]
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	[email protected]
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-30216

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.

Assigned by: [email protected] (Primary)

References for CVE-2022-30216

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30216

Products affected by CVE-2022-30216

Microsoft » Windows 10 » Version: 20h2 For X64
cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*
Matching versions
Microsoft » Windows 10 » Version: 20h2 For Arm64
cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*
Matching versions
Microsoft » Windows 10 » Version: 20h2 For X86
cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*
Matching versions
Microsoft » Windows 10 » Version: 21h1 For X64
cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*
Matching versions
Microsoft » Windows 10 » Version: 21h1 For Arm64
cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*
Matching versions
Microsoft » Windows 10 » Version: 21h1 For X86
cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*
Matching versions
Microsoft » Windows 10 » Version: 21h2 For Arm64
cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*
Matching versions
Microsoft » Windows 10 » Version: 21h2 For X64
cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*
Matching versions
Microsoft » Windows 10 » Version: 21h2 For X86
cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*
Matching versions
Microsoft » Windows Server 2016 » Version: 20h2
cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2022 » Version: N/A
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 11 » Version: N/A For Arm64
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*
Matching versions
Microsoft » Windows 11 » Version: N/A For X64
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*
Matching versions