CVE-2022-3430 CVE-2022-34303, CVE-2022-34301 and kb5012170

Topic

New Reply

More fully, (As I doubt many need to read further)

New Horizon Datasys Inc: CVE-2022-34302,

CryptoPro Secure Disk: CVE-2022-34303, Eurosoft (UK) Ltd: CVE-2022-34301

I’m guessing you probably need to update the products before installing the Windows patch.. as otherwise MS might decide you need a BIOS update for that in the meantime if you’ve not been watching those updates..

https://www.bleepingcomputer.com/news/security/windows-kb5012170-secure-boot-dbx-update-may-fail-with-0x800f0922-error/

Not in code red as it’s a “could” scenario and I’ve only actually heard of one of those affected..

Reply | Quote

Replies

“CryptoPro Secure Disk for BitLocker extends the functionality of Microsoft BitLocker with its own PreBoot authentication (PBA) and thus enables the use of established authentication methods, e.g. user ID / password, SmartCard / PIN and biometrics for multi-user operation. HelpDesk scenarios and software distribution processes can also continue to be mapped in the usual way.”

I honestly don’t see this and a consumer concern.  This is enterprise targeted.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

oldguy wrote:

’m guessing you probably need to update the products before installing the Windows patch.. as otherwise MS might decide you need a BIOS update

My Lenovo BIOS is 1.5 years old yet I had no problem installing kb5012170 on Windows 10 21H2.

Reply | Quote

my dad’s Toshiba Satellite C55Dt-A 2013 laptop automatically downloaded & installed the KB5012170 update for Win10 Home 21H2 without my intervention. it required a reboot for KB5012170 to take full effect but encountered no problems with it since the Toshiba laptop is not using Bitlocker and having UEFI & secure boot turned on.

though I could not say the same thing for some people who are experiencing problems with the KB5012170 update as mentioned on these sites:

Windows KB5012170 update causing BitLocker recovery screens, boot issues – BleepingComputer

Update KB5012170 for Secure Boot DBX causes Bitlocker issues – Born’s Tech & Windows World

Reply | Quote

The problems with kb5012170 accumulate :

Microsoft’s Secure Boot fix sends some PCs into BitLocker Recovery
Have your BitLocker key handy when updating, but maybe not on a Post-it stuck to the screen, OK?

Windows KB5012170 update causing BitLocker recovery screens, boot issues

Reply | Quote

Alex5723 wrote:

The problems with kb5012170 accumulate :

Those sources mention problems specific to Bitlocker in Win 11, right?

Reply | Quote