CVE-2022-30133 — Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

Back Back to CVE browser

CRITICAL

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

Published Aug 9, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.73%

Description

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
n/a
- Version
  10.0.10240.0
  Status
  affected
  Constraints
  <10.0.10240.19387
Vendor Microsoft Product Windows 10 Version 1607 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5291
Vendor Microsoft Product Windows 10 Version 1809 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.17763.3287
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.3287
Vendor Microsoft Product Windows 10 Version 20H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19042.1889
Vendor Microsoft Product Windows 10 Version 21H1 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19043.1889
Vendor Microsoft Product Windows 10 Version 21H2 Default
n/a
- Version
  10.0.19043.0
  Status
  affected
  Constraints
  <10.0.19044.1889
Vendor Microsoft Product Windows 11 version 21H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.22000.856
Vendor Microsoft Product Windows 7 Default
n/a
- Version
  6.1.0
  Status
  affected
  Constraints
  <6.1.7601.26065
Vendor Microsoft Product Windows 7 Service Pack 1 Default
n/a
- Version
  6.1.0
  Status
  affected
  Constraints
  <6.1.7601.26065
Vendor Microsoft Product Windows 8.1 Default
n/a
- Version
  6.3.0
  Status
  affected
  Constraints
  <6.3.9600.20520
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.21616
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
n/a
- Version
  6.1.7601.0
  Status
  affected
  Constraints
  <6.1.7601.26065
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
n/a
- Version
  6.1.7601.0
  Status
  affected
  Constraints
  <6.1.7601.26065
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.21616
Vendor Microsoft Product Windows Server 2008 Service Pack 2 (Server Core installation) Default
n/a
- Version
  6.0.6003.0
  Status
  affected
  Constraints
  <6.0.6003.21616
Vendor Microsoft Product Windows Server 2012 Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.23817
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.23817
Vendor Microsoft Product Windows Server 2012 R2 Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.20520
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.20520
Vendor Microsoft Product Windows Server 2016 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5291
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5291
Vendor Microsoft Product Windows Server 2019 Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.3287
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.3287
Vendor Microsoft Product Windows Server 2022 Default
n/a
- Version
  10.0.20348.0
  Status
  affected
  Constraints
  <10.0.20348.887
Vendor Microsoft Product Windows Server version 20H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19042.1889

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1507

n/a

Version	Status	Constraints
10.0.10240.0	affected	<10.0.10240.19387

Microsoft

Windows 10 Version 1607

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5291

Microsoft

Windows 10 Version 1809

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.17763.3287
10.0.17763.0	affected	<10.0.17763.3287

Microsoft

Windows 10 Version 20H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19042.1889

Microsoft

Windows 10 Version 21H1

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19043.1889

Microsoft

Windows 10 Version 21H2

n/a

Version	Status	Constraints
10.0.19043.0	affected	<10.0.19044.1889

Microsoft

Windows 11 version 21H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.22000.856

Microsoft

Windows 7

n/a

Version	Status	Constraints
6.1.0	affected	<6.1.7601.26065

Microsoft

Windows 7 Service Pack 1

n/a

Version	Status	Constraints
6.1.0	affected	<6.1.7601.26065

Microsoft

Windows 8.1

n/a

Version	Status	Constraints
6.3.0	affected	<6.3.9600.20520

Microsoft

Windows Server 2008 Service Pack 2

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.21616

Microsoft

Windows Server 2008 R2 Service Pack 1

n/a

Version	Status	Constraints
6.1.7601.0	affected	<6.1.7601.26065

Microsoft

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

n/a

Version	Status	Constraints
6.1.7601.0	affected	<6.1.7601.26065

Microsoft

Windows Server 2008 Service Pack 2

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.21616

Microsoft

Windows Server 2008 Service Pack 2 (Server Core installation)

n/a

Version	Status	Constraints
6.0.6003.0	affected	<6.0.6003.21616

Microsoft

Windows Server 2012

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.23817

Microsoft

Windows Server 2012 (Server Core installation)

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.23817

Microsoft

Windows Server 2012 R2

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.20520

Microsoft

Windows Server 2012 R2 (Server Core installation)

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.20520

Microsoft

Windows Server 2016

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5291

Microsoft

Windows Server 2016 (Server Core installation)

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5291

Microsoft

Windows Server 2019

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.3287

Microsoft

Windows Server 2019 (Server Core installation)

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.3287

Microsoft

Windows Server 2022

n/a

Version	Status	Constraints
10.0.20348.0	affected	<10.0.20348.887

Microsoft

Windows Server version 20H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19042.1889

Remediation

No remediation recorded yet.

Metrics

2.73% 0.02729

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.02729

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (44 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	2.73% (0.02729)	85.58th	v5 (v2026.06.15)
Jun 15, 2026	2.25% (0.02247)	80.54th	v5 (v2026.06.15)
May 31, 2026	19.10% (0.19101)	95.46th	v4 (v2025.03.14)
Dec 28, 2025	21.72% (0.21716)	95.56th	v4 (v2025.03.14)
Dec 27, 2025	17.20% (0.17199)	94.83th	v4 (v2025.03.14)
Nov 21, 2025	21.72% (0.21716)	95.52th	v4 (v2025.03.14)
Nov 18, 2025	18.45% (0.18447)	94.77th	v4 (v2025.03.14)
Oct 28, 2025	21.72% (0.21716)	95.49th	v4 (v2025.03.14)
Oct 27, 2025	17.20% (0.17199)	94.75th	v4 (v2025.03.14)
Oct 1, 2025	21.72% (0.21716)	95.58th	v4 (v2025.03.14)
Sep 21, 2025	17.20% (0.17199)	94.79th	v4 (v2025.03.14)
Aug 28, 2025	15.58% (0.15582)	94.42th	v4 (v2025.03.14)
Aug 25, 2025	13.73% (0.13730)	94.01th	v4 (v2025.03.14)
Aug 21, 2025	9.81% (0.09812)	92.66th	v4 (v2025.03.14)
Aug 15, 2025	11.20% (0.11196)	93.22th	v4 (v2025.03.14)
Mar 30, 2025	8.12% (0.08123)	91.36th	v4 (v2025.03.14)
Mar 29, 2025	12.34% (0.12341)	89.77th	v4 (v2025.03.14)
Mar 20, 2025	8.05% (0.08049)	91.42th	v4 (v2025.03.14)
Mar 17, 2025	9.38% (0.09376)	92.19th	v4 (v2025.03.14)
Feb 4, 2025	1.05% (0.01053)	84.06th	v3 (v2023.03.01)
Jan 21, 2025	4.53% (0.04531)	92.45th	v3 (v2023.03.01)
Jan 8, 2025	0.43% (0.00435)	74.47th	v3 (v2023.03.01)
Dec 25, 2024	1.62% (0.01619)	87.12th	v3 (v2023.03.01)
Dec 17, 2024	0.60% (0.00596)	78.22th	v3 (v2023.03.01)
Dec 10, 2024	2.37% (0.02365)	90.20th	v3 (v2023.03.01)
May 28, 2024	1.21% (0.01213)	85.24th	v3 (v2023.03.01)
May 13, 2024	1.06% (0.01063)	84.05th	v3 (v2023.03.01)
Mar 16, 2024	1.09% (0.01093)	84.04th	v3 (v2023.03.01)
Mar 1, 2024	0.96% (0.00962)	82.85th	v3 (v2023.03.01)
Feb 2, 2024	1.01% (0.01006)	82.09th	v3 (v2023.03.01)
Jan 20, 2024	0.94% (0.00941)	81.39th	v3 (v2023.03.01)
Sep 11, 2023	1.06% (0.01059)	82.31th	v3 (v2023.03.01)
Aug 16, 2023	1.28% (0.01282)	84.05th	v3 (v2023.03.01)
Jul 10, 2023	1.10% (0.01100)	82.45th	v3 (v2023.03.01)
Jun 29, 2023	1.02% (0.01018)	81.69th	v3 (v2023.03.01)
Jun 16, 2023	1.55% (0.01546)	85.25th	v3 (v2023.03.01)
Jun 5, 2023	1.25% (0.01252)	83.60th	v3 (v2023.03.01)
Jun 1, 2023	2.11% (0.02107)	87.53th	v3 (v2023.03.01)
May 24, 2023	2.17% (0.02174)	87.72th	v3 (v2023.03.01)
Mar 18, 2023	1.82% (0.01816)	86.31th	v3 (v2023.03.01)
Mar 7, 2023	1.50% (0.01500)	84.81th	v3 (v2023.03.01)
Mar 6, 2023	1.60% (0.01601)	75.58th	v2 (v2022.01.01)
Aug 12, 2022	1.60% (0.01601)	74.42th	v2 (v2022.01.01)
Aug 10, 2022	1.16% (0.01156)	59.81th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30133
vendor-advisory

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30133		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Aug 9, 2022

Updated Jan 2, 2025

Reserved May 3, 2022

Link CVE-2022-30133

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-30133

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-30133