CVE-2022-3859
- State
- Published
- Severity
- 6.7 Medium
- Published
- Nov 30, 2022
- Updated
- Apr 23, 2025
- Reserved
- Nov 4, 2022
Description
An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.7 Medium | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | trellix |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Trellix AgentTrellix |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.