CVE-2022-30190

[Sysadmin]

Can anyone tell me whether my Kaspersky Endpoint Security 11.9.0.351 is going to detect this yet?  I've tried searching and can't seem to find any reference to it here.

https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/

[Goddeimos13]

KES doesn't detect such vulnerabilities.

[Diego Moraes]

Microsoft doesn't have a fix for this CVE yet, when the patch comes out you can refer to the KLA here.

https://threats.kaspersky.com/en/?s=CVE-2022-30190

[Danila T.]

Hello,

At the moment there are detections:

•    PDM:Exploit.Win32.Generic
•    HEUR:Exploit.MSOffice.Agent.n
•    HEUR:Exploit.MSOffice.Agent.gen
•    HEUR:Exploit.MSOffice.CVE-2017-0199.a
•    HEUR:Exploit.MSOffice.CVE-2021-40444.a

Also: https://www.kaspersky.com/blog/follina-cve-2022-30190-msdt/44461/

[ak01]

Does the KES Adaptive Anomaly Control  Module help to block that CVE?

https://support.kaspersky.com/KESWin/11.9.0/en-US/173855.htm