CVE-2022-3859
First published: Wed Nov 30 2022(Updated: )
An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.
Credit: trellixpsirt@trellix.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trellix Agent | <5.7.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-3859?
CVE-2022-3859 is an uncontrolled search path vulnerability that exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8.
What is the impact of CVE-2022-3859?
The vulnerability allows an attacker with admin access to elevate their privileges to System by placing a malicious DLL in the restricted Windows System folder.
How can an attacker exploit CVE-2022-3859?
To exploit CVE-2022-3859, an attacker would need administrative access to the system and place a malicious DLL in the restricted Windows System folder.
What is the severity of CVE-2022-3859?
The severity of CVE-2022-3859 is medium, with a severity value of 6.7.
How can I fix CVE-2022-3859?
To fix CVE-2022-3859, upgrade Trellix Agent (TA) for Windows to version 5.7.8 or later.
- collector/nvd-index
- agent/tags
- agent/event
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/trellix
- canonical/trellix agent