CVE-2022-37015
9.8CRITICAL
Key Information
- Vendor
- Symantec
- Status
- Symantec Endpoint Detection And Response
- Vendor
- CVE Published:
- 8 November 2022
Summary
Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Affected Version(s)
Symantec Endpoint Detection and Response = 4.6.x
Refferences
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database