Vulnerability DatabaseCVE-2022-30170

CVE-2022-30170:
vulnerability analysis and mitigation

Overview

Windows Credential Roaming Service Elevation of Privilege Vulnerability (CVE-2022-30170) was identified and disclosed on May 3, 2022. This vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10, Windows 11, and various Windows Server editions (NVD, CVE).

Technical details

The vulnerability has been assigned a CVSS v3.1 base score of 7.3 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and user interaction to exploit, while potentially impacting confidentiality, integrity, and availability at high levels (NVD).

Impact

The vulnerability could allow an attacker to achieve elevation of privilege on affected systems, potentially gaining higher levels of access than initially authorized. This could lead to complete system compromise in terms of confidentiality, integrity, and availability (Rapid7).

Mitigation and workarounds

Microsoft has released security updates to address this vulnerability across multiple affected Windows versions. Updates are available through various KB articles including KB5017305, KB5017308, KB5017315, KB5017316, KB5017327, KB5017328, KB5017365, and KB5017377 (Rapid7).