CVE-2022-30145
Published: 15 June 2022
Summary
CVE-2022-30145 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 9.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Windows Encrypting File System (EFS) contains a remote code execution vulnerability tracked as CVE-2022-30145. The flaw affects the EFS component in supported Windows releases and carries a CVSS 3.1 score of 7.5 with a network attack vector, high attack complexity, low privileges required, and no user interaction needed. Successful exploitation can result in full confidentiality, integrity, and availability impact on the affected system.
An authenticated attacker with network access can trigger the flaw to execute arbitrary code in the context of the vulnerable EFS process. Because the vector is remote and requires only low privileges, the issue could be reached from an adjacent or external network position once the complexity conditions are met, potentially allowing takeover of systems that rely on EFS for encrypted file access.
Microsoft has published guidance and patches for the vulnerability through its Security Response Center at the referenced URLs. Administrators should apply the updates listed in those advisories to address the issue.
The associated EPSS score has remained flat at 0.0543 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-35353
Vulnerability details
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.