← back
CVE-2022-30154medium

Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 1.7%
exploitation probability
1.7%top 23% of all CVEs
observed exploitation
nono source reports it
Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
Affected products
Microsoft · Windows Server 2012Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2012 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server version 20H2
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30154https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30154