Vulnerabilities CVE-2022-31199

CVE-2022-31199

Medium

Open

KEV

TLP:CLEAR

Netwrix Auditor Insecure Object Deserialization Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Netwrix — Auditor — Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly blocked by standard enterprise firewalling.

Details

EPSS Score ⓘ: 36.01%

98.3th percentile
Confidence: 100%
CISA KEV
Date Added: Jul 11, 2023
Patch Due: Aug 1, 2023
Required Action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.