CVE-2022-3859

Published Nov 30, 2022

Last updated a year ago

CVSS medium 6.7

Overview

Description: An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.
Source: trellixpsirt@trellix.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.7
Impact score: 5.9
Exploitability score: 0.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-427

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:trellix:agent:*:*:*:*:windows:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F8FEE16-0E7F-4017-B9DC-9791D53191A1",
            "versionEndExcluding": "5.7.8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References