CVE-2022-30137

medium

Description

Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30137

https://www.tenable.com/cyber-exposure/tenable-2022-threat-landscape-report

https://unit42.paloaltonetworks.com/fabricscape-cve-2022-30137/

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30137

Details

Source: Mitre, NVD

Published: 2022-06-15

Updated: 2026-06-17

Named Vulnerability: FabricScape

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.7

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Severity: Medium

EPSS

EPSS: 0.00101