CVEvulnerability
CVE-2022-36670
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-09-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-732
Description
PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.
Affected configurations
• pcprotect endpoint (< 5.17.470)
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://mrvar0x.com/2022/07/21/pcprotect-endpoint-tampering-exploit/ Exploit, Third Party Advisory
- https://mrvar0x.com/2022/07/21/pcprotect-endpoint-tampering-exploit/ Exploit, Third Party Advisory