CVE-2022-36670

2022-09-0618:08:43

mitre

www.cve.org

pcprotect

endpoint

tamper protection

privilege escalation

microsoft windows

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

JSON

PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.

References

mrvar0x.com/2022/07/21/pcprotect-endpoint-tampering-exploit/