CVE-2022-37016
Last modified
CVE-2022-37016 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.. EPSS estimates a 0.67% chance of exploitation in the next 30 days.
Description
Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Symantec Endpoint Protection | <= 14.3.5 |
References
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21014Permissions Required, Vendor Advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21014Permissions Required, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-37016?
How severe is CVE-2022-37016?
How do I fix CVE-2022-37016?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-3701 A privilege elevation vulnerability was reported in the Len…7.8
- CVE-2022-37010In JetBrains IntelliJ IDEA before 2022.2 email address valid…3.3
- CVE-2022-37011A vulnerability has been identified in Mendix SAML (Mendix 7…9.8
- CVE-2022-37012This vulnerability allows remote attackers to create a denia…7.5
- CVE-2022-37013This vulnerability allows remote attackers to create a denia…7.5
- CVE-2022-37015Symantec Endpoint Detection and Response (SEDR) Appliance, p…9.8
- CVE-2022-37017Symantec Endpoint Protection (Windows) agent, prior to 14.3 …7.5
- CVE-2022-37018A potential vulnerability has been identified in the system …8.4
- CVE-2022-37019Potential vulnerabilities have been identified in the system…6.8
- CVE-2022-3702 A denial of service vulnerability was reported in Lenovo Va…7.1
- CVE-2022-37020Potential vulnerabilities have been identified in the system…6.8
- CVE-2022-37021Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vu…9.8
Are you affected by CVE-2022-37016?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST