CVE-2022-47529

🗓️ 28 Mar 2023 13:15:07Reported by [email protected]Type

Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration, bypassing tamper-protection features via ACL modificatio

Reporter	Title	Published	Views	Family All 13
0day.today	RSA NetWitness Endpoint EDR Agent 12.x Incorrect Access Control / Code Execution	28 Mar 202300:00	–	zdt
ATTACKERKB	CVE-2022-47529	28 Mar 202313:15	–	attackerkb
Circl	CVE-2022-47529	28 Mar 202316:44	–	circl
CNNVD	RSA NetWitness Platform 安全漏洞	28 Mar 202300:00	–	cnnvd
CVE	CVE-2022-47529	28 Mar 202300:00	–	cve
Cvelist	CVE-2022-47529	28 Mar 202300:00	–	cvelist
Exploit DB	RSA NetWitness Platform 12.2 - Incorrect Access Control / Code Execution	8 Apr 202300:00	–	exploitdb
OSV	CVE-2022-47529	28 Mar 202313:15	–	osv
Packet Storm	RSA NetWitness Endpoint EDR Agent 12.x Incorrect Access Control / Code Execution	24 Mar 202300:00	–	packetstorm
Packet Storm	Trojan.Win32.Razy.abc MVID-2024-0678 Insecure Permissions	8 Apr 202400:00	–	packetstorm

NVD

Node

rsa netwitnessRange<12.2

Source	Link
seclists	www.seclists.org/fulldisclosure/2023/Mar/16
twitter	www.twitter.com/hyp3rlinx/status/1639335477839790105
hyp3rlinx	www.hyp3rlinx.altervista.org/advisories/RSA_NETWITNESS_EDR_AGENT_INCORRECT_ACCESS_CONTROL_CVE-2022-47529.txt
packetstormsecurity	www.packetstormsecurity.com/files/171476/RSA-NetWitness-Endpoint-EDR-Agent-12.x-Incorrect-Access-Control-Code-Execution.html
seclists	www.seclists.org/fulldisclosure/2024/Apr/17
github	www.github.com/hyp3rlinx/CVE-2022-47529
community	www.community.netwitness.com/t5/netwitness-platform-security/nw-2023-04-netwitness-platform-security-advisory-cve-2022-47529/ta-p/696935
seclists	www.seclists.org/fulldisclosure/2023/Mar/26

21 Nov 2024 07:32Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.7

EPSS0.03655