Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c3rc-wfgg-r544

Опубликовано: 08 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.

EPSS

Процентиль: 92%
0.08052
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.

CVSS3: 9.8
fstec
больше 3 лет назад

Уязвимость компонента User Activity Video Recording программного средства для обеспечения безопасности и контроля ИТ-инфраструктуры Netwrix Auditor, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 92%
0.08052
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502