Vulnerability · Published Jul 27, 2022 · Assigned by trellix
CVE-2022-2313DLL high jacking in Trellix Agent
High 8.2
In plain English
A high-severity security flaw in Trellix Agent (TA) from Trellix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.4%top 71.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trellix | Trellix Agent (TA) | unspecified – before 5.7.7 |