Exploitation Summary
EIP tracks 2 public exploits for CVE-2022-3368. PoCs published by Wh04m1001, byt3n33dl3.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-3368, leveraging oplock manipulation and symbolic link abuse to achieve local privilege escalation (LPE) on Windows systems. The code demonstrates the creation of junctions, file handle manipulation, and DLL hijacking to trigger arbitrary code execution in a privileged context.
Description
A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.
Exploits (2)
This repository contains a functional exploit for CVE-2022-3368, leveraging oplock manipulation and symbolic link abuse to achieve local privilege escalation (LPE) on Windows systems. The code demonstrates the creation of junctions, file handle manipulation, and DLL hijacking to trigger arbitrary code execution in a privileged context.
This repository contains a functional exploit for CVE-2022-3368, leveraging oplock manipulation and symbolic link abuse to achieve local privilege escalation (LPE) on Windows systems. The exploit involves creating junctions, manipulating file handles, and triggering DLL loading to escalate privileges.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H