CVE-2022-37015

Severity
9.8CRITICAL
EPSS
0.5%
top 33.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 8
Latest updateNov 9

Description

Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-f545-9c5v-qxgw: Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 42022-11-09
CVEList
CVE-2022-37015: Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 42022-11-08
CVE-2022-37015 (CRITICAL CVSS 9.8) | Symantec Endpoint Detection and Res | cvebase.io