CVE-2022-4294

Published: Jan 10, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected (4)

Products: Avira: Avira Security · Norton: Power Eraser · Avast: Antivirus · +1 more

Show all products

Avira: Avira Security · Norton: Power Eraser · Avast: Antivirus · Avg: Antivirus

1 product

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Avira Avira Security	Before 1.1.78
Norton Power Eraser	Before 119.1.5.1

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Avast Antivirus	Before 22.10
Avg Antivirus	Before 22.10

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://support.norton.com/sp/static/external/tools/security-advisories.html

Source: security@nortonlifelock.com

Vendor Advisory

https://support.norton.com/sp/static/external/tools/security-advisories.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.