CVE-2022-47529

Опубликовано: 28 мар. 2023

Источник: nvd

CVSS3: 6.7

EPSS Низкий

Описание

Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration: to either disable it completely or run user-supplied code or commands, thereby bypassing tamper-protection features via ACL modification.

Ссылки

http://seclists.org/fulldisclosure/2023/Mar/26
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Apr/17
https://community.netwitness.com/t5/netwitness-platform-security/nw-2023-04-netwitness-platform-security-advisory-cve-2022-47529/ta-p/696935
Permissions Required
https://github.com/hyp3rlinx/CVE-2022-47529
https://hyp3rlinx.altervista.org/advisories/RSA_NETWITNESS_EDR_AGENT_INCORRECT_ACCESS_CONTROL_CVE-2022-47529.txt
Exploit
Third Party Advisory
https://packetstormsecurity.com/files/171476/RSA-NetWitness-Endpoint-EDR-Agent-12.x-Incorrect-Access-Control-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://seclists.org/fulldisclosure/2023/Mar/16
Mailing List
Third Party Advisory
https://twitter.com/hyp3rlinx/status/1639335477839790105
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Mar/26
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Apr/17
https://community.netwitness.com/t5/netwitness-platform-security/nw-2023-04-netwitness-platform-security-advisory-cve-2022-47529/ta-p/696935
Permissions Required
https://github.com/hyp3rlinx/CVE-2022-47529
https://hyp3rlinx.altervista.org/advisories/RSA_NETWITNESS_EDR_AGENT_INCORRECT_ACCESS_CONTROL_CVE-2022-47529.txt
Exploit
Third Party Advisory
https://packetstormsecurity.com/files/171476/RSA-NetWitness-Endpoint-EDR-Agent-12.x-Incorrect-Access-Control-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://seclists.org/fulldisclosure/2023/Mar/16
Mailing List
Third Party Advisory
https://twitter.com/hyp3rlinx/status/1639335477839790105
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:rsa:netwitness:*:*:*:*:*:*:*:*

Версия до 12.2 (исключая)

EPSS

Процентиль: 87%

0.03353

Низкий

6.7 Medium

CVSS3

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9qv7-h3f8-5wpx