Forum Discussion
Zero Click Zero Day in Microsoft Support Diagnostic Tool...
Zero Click Zero Day in Microsoft Support Diagnostic Tool Exploited in the Wild (CVE-2022-30190) On May 30, Microsoft released an advisory for a zero-day in the Microsoft Windows Support Diagnostic T...
Hi @Suraj Thakur , the number of assets with this High vulnerability in our environment began reducing yesterday. It appears a scan of each asset is required to adjust the severity rating of the plugin.
We are seeing the same -- a new scan is required for an asset to show the plugin as an Info. Currently we have some assets showing Critical (last scanned ~6/2), some High (last scanned ~6/19) and now Info (last scanned 6/23).
In the Vulnerabilities screen filtered by plugin, the output line shows Severity Info, VPR 9.5, CVSS 0.
Meanwhile the plugin details screen at the Vulnerabilities>Vulnerability Details level still shows Severity Critical, CVSS 10.0, but no VPR score.
Plugin Set: 202206231847
