CVE-2022-41604

Katalog CVE

CVSS 8.8 · High EPSS 0,62%

Kerentanan Improper Privilege Management pada checkpoint zonealarm. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This can be leveraged to perform an arbitrary file move as NT AUTHORITY\SYSTEM.

Rincian

Terbit di NVD

27 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.zonealarm.com/software/extreme-security/release-history release notes · advisory vendor
• https://github.com/Wh04m1001/ZoneAlarmEoP exploit · release notes · advisory pihak ketiga
• https://www.infigo.hr/en/insights/39/elevation-of-privilege-in-zonealarm-extreme-security/ advisory pihak ketiga