![](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2022\/08\/10125801\/dogwalk-vulnerability-patch-Tuesday-08-2022-Featured.jpg\"\/)
<\/p>\n<\/p>\n
Credit to Author: Editorial Team| Date: Wed, 10 Aug 2022 17:05:08 +0000<\/strong><\/p>\n With this August patch Tuesday Microsoft fixed more than a hundred vulnerabilities. Some of the vulnerabilities require special attention from corporate cybersecurity personal. Among them there are 17 critical ones, two of which are zero-days. At least one vulnerability has already been actively exploited in the wild, so it would be wise not to delay the patch implementation. It is no coincidence that the US Cybersecurity and Infrastructure security agency recommends<\/a> paying attention to this update.<\/p>\n The most dangerous of the newly closed vulnerabilities is CVE-2022-34713<\/a>. Potentially it allows remote execution of malicious code (belongs to the RCE<\/a> type). CVE-2022-34713, dubbed DogWalk, is a vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT), like Follina<\/a>, which made some hype in May of this year.<\/p>\n The problem lies in how the system handles Cabinet (.cab) archives. To exploit the vulnerability, attacker needs to lure the user to open a malicious file that saves the .diagcab archive to the Windows Startup folder so that its contents will be executed the next time the user restarts his computer and logs in.<\/p>\n Actually DogWalk was discovered two years<\/a> ago, but then the system developers for some reason did not pay enough attention to this problem. Now the vulnerability is fixed, but Microsoft has already detected its exploitation.<\/p>\n The second zero-day vulnerability closed last Tuesday is CVE-2022-30134<\/a>. It is contained in Microsoft Exchange. Information about it was published before Microsoft was able to create the patch, but so far this vulnerability has not been exploited in the wild. Theoretically if an attacker manages to use CVE-2022-30134, he will be able to read the victim’s email correspondence. This is not the only flaw in Exchange that was fixed by the new patch. It also closes the CVE-2022-24516<\/a>, CVE-2022-21980<\/a> and CVE-2022-24477<\/a> vulnerabilities that allow attackers to elevate their privileges.<\/p>\n As for the CVSS rating, two related vulnerabilities are conditional champions: CVE-2022-30133<\/a> and CVE-2022-35744<\/a>. Both are found in the Point-to-Point Protocol (PPP). Both allow attackers to send requests to the remote access server, which can lead to the execution of malicious code on the machine. And both have the same CVSS score: 9.8.<\/p>\n For those who for some reasons cannot immediately install patches, Microsoft recommends closing port 1723 (vulnerabilities can only be exploited through it). However, be aware that this may disrupt the stability of communications on your network.<\/p>\n We advise to install fresh Microsoft updates as soon as possible, and do not forget to check all the information in the FAQs, Mitigations, and Workarounds section on the update guide<\/a> that is relevant to your infrastructure.<\/p>\n In addition, it should be remembered that all computers in the company with Internet access (whether they are workstations or servers) must be equipped with a reliable cybersecurity solution<\/a>, capable to protect them against exploitation of even yet undetected vulnerabilities.<\/p>\nDogWalk (aka CVE-2022-34713) \u2014 RCE vulnerability in MSDT<\/h2>\n
Other vulnerabilities to watch out for<\/h2>\n
How to stay safe<\/h2>\n