CVE-2022-30216 is a high-severity tampering vulnerability affecting Windows Server Service across various Windows 10, 11, and Server versions. With a CVSS score of 8.8, it allows an authenticated attacker to remotely achieve high impact on confidentiality, integrity, and availability with low attack complexity. While not currently listed in CISA's KEV catalog or having public exploit code, its high EPSS and FAUCET scores, along with mentions in cybersecurity media, indicate significant potential risk and community awareness. Notably, one article links it to potential Iranian cyber counteroffensive operations, suggesting a possible nation-state interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
20h2CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:* | ||
20h2CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:* | ||
20h2CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:* | ||
21h1CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:* | ||
21h1CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.