CVE-2022-47529
Medium
Description
Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration: to either disable it completely or run user-supplied code or commands, thereby bypassing tamper-protection features via ACL modification.
SeverityMedium
CVSS6.7
Exploit probability—
ProductRsa Netwitness
PublishedMar 28, 2023
First seenMar 28, 2023
How to fix
Update
- rsa netwitness12.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsa netwitness | v < 12.2 | 12.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.