CISA known exploited vulnerability

CVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

SOURCE FACT

Microsoft · Windows

A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.

Apply updates per vendor instructions.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713; https://nvd.nist.gov/vuln/detail/CVE-2022-34713

CHECK YOUR OUTSIDE-IN INVENTORY