CVE-2022-3368 — Software Updater of Avira Security for Windows vulnerable to Privilege Escalation

CVE-2022-3368

Software Updater of Avira Security for Windows vulnerable to Privilege Escalation PUBLISHED

Description (CNA)

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.

Affected (CNA)

Vendor / product	Versions
Nortonlifelock / "Avira Security" – for Windows	affected all before 1.1.71.30554

CWE

No CWE identifiers supplied.

References

https://support.norton.com/sp/static/external/tools/security-advisories.html

ADP enrichment

CVE

No English description supplied.

https://support.norton.com/sp/static/external/tools/security-advisories.html

CISA-ADP

No English description supplied.

No references supplied.