CVE-2022-2313

CWE-4274 documents4 sources
Severity
7.3HIGH
EPSS
0.0%
top 90.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trellix Trellix Agent (ta)Mcafee Agent
Timeline
PublishedJul 27
Latest updateFeb 26

Description

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:HExploitability: 1.5 | Impact: 6.0

Affected Packages2 packages

▶NVDmcafee/agent< 5.7.7
▶CVEListV5trellix/trellix_agent_(ta)unspecified — 5.7.7

🔴Vulnerability Details

2
GHSA
GHSA-359g-8g36-v6qg: A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5↗2022-07-28
▶
CVEList
DLL high jacking in Trellix Agent↗2022-07-27
▶

📋Vendor Advisories

1
Red Hat
kernel: mt76: fix monitor mode crash with sdio driver↗2025-02-26
▶