CVE-2022-3368

Software Updater of Avira Security for Windows vulnerable to Privilege Escalation

High · published October 17, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01073 · 64.6th percentile
Published
2022-10-17T20:52Z
EPSS history
Timeline
  • 17 OCT 20:52Z
    Software Updater of Avira Security for Windows vulnerable to Privilege Escalation
    cvelistv5