HomeSymantecCVE-2022-37015

CVE-2022-37015

CRITICAL
9.8CVSS
Published: 2022-11-08
Updated: 2025-05-01
AI Analysis

Description

Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

CVSS Metrics

Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
network
Complexity
low
Privileges
none
User Action
none
Scope
unchanged
Confidentiality
high
Integrity
high
Availability
high
Weaknesses
NVD-CWE-noinfoCWE-269

Metadata

Primary Vendor
SYMANTEC
Published
11/8/2022
Last Modified
5/1/2025
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

symantec : endpoint_detection_and_response

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief

CVE-CVE-2022-37015 | CRITICAL Severity | CVEDatabase.com | CVEDatabase.com