Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
CriticalExploited in the wild	9.8	KEVEPSS 36%	CVE-2022-31199Auditor · Netwrix Auditor Insecure Object Deserialization Vulnerability Critical9.8KEVEPSS 36%2023-07-11CISA KEVCVE-2022-31199 CVE-2022-31199 is an insecure object deserialization vulnerability in the Netwrix Auditor User Activity Video Recording component. It allows an unauthenticated remote attacker to execute code with NT AUTHORITY\SYSTEM privileges if they can reach port 9004/TCP. This port is commonly blocked by enterprise firewalls. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. KEVEPSS 36%Vulnerability Netwrix #exploited-in-the-wild	CISA KEV	2023-07-11

Showing 1–1 of 1 result