PT-2022-19230
CVE-2022-28782
·
Published
2022-05-03
·
Updated
2023-06-28
Description by
CVSS 3.1
4.6
MediumMetricsAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Contents To Window versions prior to SMR May-2022 Release 1
Description
The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a physical attacker.
Recommendations
For versions prior to SMR May-2022 Release 1, apply the patch that blocks the entry point of the vulnerability to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾