CVE-2022-4429 - OpenCVE

Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges to cause a Denial of Service. The issue was fixed with Avira Security version 1.1.78

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Avira	Avira Security

Configuration 1 [-]

cpe:2.3:a:avira:avira_security:*:*:*:*:*:windows:*:*

No data.

References

Link	Providers
https://support.norton.com/sp/static/external/tools/security-advisories.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: NLOK

Published: 2023-01-10T09:28:41.375Z

Updated: 2024-08-03T01:41:44.621Z

Reserved: 2022-12-12T17:47:07.937Z

Link: CVE-2022-4429

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-01-10T10:15:13.737

Modified: 2023-11-07T03:57:48.227

Link: CVE-2022-4429

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-4429", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "state": "PUBLISHED", "assignerShortName": "NLOK", "dateReserved": "2022-12-12T17:47:07.937Z", "datePublished": "2023-01-10T09:28:41.375Z", "dateUpdated": "2024-08-03T01:41:44.621Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Avira Security for Windows", "vendor": "NortonLifelock (GenDigital)", "versions": [{"status": "affected", "version": "up to version 1.1.77"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges to cause a Denial of Service. <span style=\"background-color: rgb(255, 255, 255);\">The issue was fixed with Avira Security version 1.1.78</span></span><br>"}], "value": "Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges to cause a Denial of Service.\u00a0The issue was fixed with Avira Security version 1.1.78\n"}], "impacts": [{"descriptions": [{"lang": "en", "value": "Denial of Service"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-428", "description": "CWE-428 Unquoted Search Path or Element", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "NLOK", "dateUpdated": "2023-01-10T09:28:41.375Z"}, "references": [{"url": "https://support.norton.com/sp/static/external/tools/security-advisories.html"}], "source": {"discovery": "UNKNOWN"}, "title": "Avira Security for Windows - Denial of Service", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T01:41:44.621Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.norton.com/sp/static/external/tools/security-advisories.html", "tags": ["x_transferred"]}]}]}}