Vulnerability CVE-2022-35412
Published: 2022-07-08

Description:
Digital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a supported way to uninstall the product) to disable some of the agent functionality and then exfiltrate files to an external USB device.

Type:

NVD-CWE-noinfo

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.6/10
4.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
Digitalguardian -> Digital guardian 

 References:
https://github.com/i014n/DigitalGuardian-DLP-Agent-vulnerability
https://www.tenforums.com/tutorials/46259-block-unblock-legacy-file-system-filter-drivers-windows-10-a.html
Copyright 2024, cxsecurity.com

 

Back to Top