Severity
Medium
Analysis Summary
CVE-2022-30189
Microsoft Windows could allow a remote attacker to conduct spoofing attacks, caused by a flaw in the Autopilot Device Management and Enrollment Client component. An attacker could exploit this vulnerability to cause an impact on confidentiality.
Impact
- Unauthorized Access
Indicators Of Compromise
CVE
- CVE-2022-30189
Affected Vendors
Microsoft
Affected Products
- Microsoft Windows 10 20H2 for 32-bit Systems
- Microsoft Windows 10 20H2 for ARM64-based Systems
- Microsoft Windows 10 20H2 for x64-based Systems
- Microsoft Windows 10 21H1 for 32-bit Systems
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.