CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability (MSDT) Workaround Using Group Policy
Channel: DoesThis Cybersecurity
Date: 2022-06-01

This video demonstrates how you could use Group Policy to apply the Microsoft workaround for CVE-2022-30190 Microsoft Support Diagnostic Tool (MSDT) "Follina" Vulnerability. The video also shows you how to use Group Policy to undo the workaround.

While this video is focused on using Group Policy to apply the Microsoft workaround it also shows the attack using a malicious Microsoft Word document that results in getting a reverse shell via netcat using a poc script made available by John Hammond

*** This video is provided for educational use and should be tested in a non-production environment before using in production. ***  

References:
MS-MSDT "Follina" Attack Vector
https://github.com/JohnHammond/msdt-follina

Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability
https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/