---
title: "Pharos response to Microsoft Support Diagnostic Tool (MSDT) vulnerability (CVE-2022-30190) - June 2022"
slug: "pharos-response-to-microsoft-support-diagnostic-tool-msdt-vulnerability-cve-2022-30190"
updated: 2024-04-05T07:13:33Z
published: 2024-04-05T07:13:33Z
canonical: "kb.pharos.com/pharos-response-to-microsoft-support-diagnostic-tool-msdt-vulnerability-cve-2022-30190"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.pharos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Pharos response to Microsoft Support Diagnostic Tool (MSDT) vulnerability (CVE-2022-30190) - June 2022

**Background:**

Recently Microsoft announced a new vulnerability (CVE-2022-30190) relating to the Microsoft Support Diagnostic Tool (MSDT). A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application.

**Pharos response:**

Pharos has updated our Group Policy to disable the use of Microsoft Troubleshooting tools until a patch has been released by Microsoft and applied to all necessary company assets.

**Pharos recommendation:**

Pharos recommends that Blueprint and Uniprint customers update their Group Policy to disable the use of Microsoft Troubleshooting tools until a patch has been released by Microsoft and apply to all necessary workstations.

## Related

- [Pharos Response to MOVEit Vulnerability - June 2023](/pharos-response-to-moveit-vulnerability.md)
- [Pharos software is NOT susceptible to the new WS_FTP Vulnerability - October 2023](/pharos-software-is-not-susceptible-to-the-new-ws-ftp-vulnerability.md)
- [Pharos Response to PrintNightmare Vulnerability - September 2021](/pharos-response-to-printnightmare-vulnerability.md)
- [How do I use the Print Scout or Tracker Diagnostic Tool called DiagTool.exe?](/how-do-i-use-the-print-scout-or-tracker-diagnostic-tool-called-diagtoolexe.md)