sentrium-security/follina-workaround-cve-2022-30190
These two scripts can be used to apply the workaround provided by Microsoft to mitigate the vulnerability CVE-2022-30190 as detailed in the MSRC blog and to restore the workaround, should an official patch be released.
The first script 'FollinaMitigation.ps1' will backup the registry key and then remove it in order to apply the workaround. The second script 'FollinaImportKey.ps1' will import the registry key that was previously exported.
Additional details can be found here
To run these scripts locally, start a PowerShell prompt with elevated privileges and simply execute:
.\FollinaMitigation.ps1
.\FollinaImportKey.ps1
You can use these PowerShell scripts within the Microsoft Endpoint Manager to deploy the fix across multiple hosts. To achieve this, follow the steps below.
Once the device(s) sync, the script should execute. More details can be found here.
Licensed under MIT
The software is provided "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages or other liability, whether in an action of contract, tort or otherwise, arising from, out of or in connection with the software or the use or other dealings in the software.
Modifying the registry can cause unwanted behaviour and should be treated carefully. Sentrium have done their best to validate the two scripts provided within test environments and we strongly recommend you do so too if using them.
We have aimed to keep the script simple and readable and to follow the guidance as accurately as possible.
