PatchSiren cyber security CVE debrief
CVE-2022-34713 Microsoft CVE debrief
CVE-2022-34713 is a Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution vulnerability that CISA added to its Known Exploited Vulnerabilities catalog on 2022-08-09. Because it is listed as known exploited and CISA set a remediation due date of 2022-08-30, it should be treated as urgent patching work for Windows environments.
- Vendor
- Microsoft
- Product
- Windows
- CVSS
- Unknown
- CISA KEV
- Listed
- Original CVE published
- 2022-08-09
- Original CVE updated
- 2022-08-09
- Advisory published
- 2022-08-09
- Advisory updated
- 2022-08-09
Who should care
Windows administrators, endpoint security teams, vulnerability management teams, and incident responders responsible for Microsoft Windows systems.
Technical summary
The supplied corpus identifies CVE-2022-34713 as a Microsoft Windows MSDT remote code execution vulnerability. CISA’s KEV entry indicates the issue is known to be exploited and directs defenders to apply vendor updates. The corpus does not provide a CVSS score, exploit chain details, or affected build list, so remediation should be driven by the official Microsoft and CISA guidance linked in the source materials.
Defensive priority
Urgent
Recommended defensive actions
- Apply Microsoft updates and follow vendor instructions as directed by CISA.
- Prioritize remediation for all Windows systems that use or expose MSDT-related functionality.
- Verify patch deployment across the fleet and confirm systems are no longer missing the relevant update.
- Use the official CVE, NVD, and CISA KEV records to track remediation status and any vendor guidance updates.
Evidence notes
CISA’s Known Exploited Vulnerabilities entry lists CVE-2022-34713 as a Microsoft Windows MSDT remote code execution vulnerability with dateAdded 2022-08-09, dueDate 2022-08-30, knownRansomwareCampaignUse marked Unknown, and requiredAction 'Apply updates per vendor instructions.' The source item metadata also references the Microsoft update guide and the NVD detail page. No CVSS score was provided in the supplied corpus.
Official resources
-
CVE-2022-34713 CVE record
CVE.org
-
CVE-2022-34713 NVD detail
NVD
-
CISA Known Exploited Vulnerabilities catalog
CISA - Apply updates per vendor instructions.
-
Source item URL
cisa_kev
Publicly cataloged by CISA as a Known Exploited Vulnerability on 2022-08-09; the provided corpus is limited to official catalog and record metadata.