CVE-2023-0975: High severity trellix agent vulnerability
A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the Agent’s executables before it can be executed. This allows the user to elevate their permissions.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-0975.
What is the severity of CVE-2023-0975?
The severity of CVE-2023-0975 is high.
What is the affected software for CVE-2023-0975?
The affected software for CVE-2023-0975 is Trellix Agent for Windows version 5.7.8 and earlier.
How does CVE-2023-0975 affect users?
CVE-2023-0975 allows local users to replace one of the Agent's executables during the install/upgrade workflow, enabling them to elevate their permissions.
Is Microsoft Windows affected by CVE-2023-0975?
No, Microsoft Windows is not affected by CVE-2023-0975.
How can I fix CVE-2023-0975?
To fix CVE-2023-0975, it is recommended to update to a version of Trellix Agent for Windows that is newer than 5.7.8.
Where can I find more information about CVE-2023-0975?
You can find more information about CVE-2023-0975 [here](https://kcm.trellix.com/corporate/index?page=content&id=SB10396).
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-0975?
The CWE ID for CVE-2023-0975 is CWE-281.