CVE-2022-2188

low-risk
Published 2022-11-07

Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.

Do I need to act?

-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Data Exchange Layer

Affected Vendors

Mcafee

References (2)

Vendor Advisory https://kcm.trellix.com/corporate/index?page=content&id=SB10383
Vendor Advisory https://kcm.trellix.com/corporate/index?page=content&id=SB10383
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal