Netskope Threat Labs

OS-WINDOWS Microsoft Support Diagnostic Tool remote code execution attempt

IPS-CFWIPS-SWG

3 SIDs: 59892, 59894, 59950

Stats

First seen
August 2022
Last seen
October 2026

Description

Detects an attempt to exploit CVE-2022-30190, a remote code execution flaw that can run code on the target in Microsoft Support Diagnostic Tool.

CVEs

CVE-2022-30190

Related malware families

CVE-2022-30190Microsoft

Related blogs

References