Vulnerability · Published Nov 30, 2022 · Assigned by trellix
CVE-2022-3859
Medium 6.7
In plain English
A medium-severity security flaw in Trellix Agent from Trellix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.2%top 88.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trellix | Trellix Agent | 5.x – through 5.7.8 |