PT-2022-26221 · Zemana · Zemana Antimalware+1

Published 2022-10-24 · Updated 2026-04-14 · CVE-2022-42045

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zemana AntiMalware version 3.2.28 Watchdog Anti-Malware version 4.1.422

Description The issue allows for arbitrary code injection, which can be exploited to execute code in kernel mode. This can lead to disabling mandatory driver signature checks, allowing any unsigned driver to be loaded. The vulnerability is related to the amsdk.sys driver in the Zemana Antimalware SDK.

Recommendations For Zemana AntiMalware version 3.2.28, update to a version that includes a fix for the arbitrary code injection issue. For Watchdog Anti-Malware version 4.1.422, update to a version that includes a fix for the arbitrary code injection issue. As a temporary workaround, consider disabling the amsdk.sys driver until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-42045

Affected Products

Zemana Antimalware

Amsdk.Sys

References · 10

• 🔥 https://github.com/ReCryptLLC/CVE-2022-42045/tree/main · Exploit
• 🔥 https://github.com/ReCryptLLC/CVE-2022-42045 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-42045 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42045 · Vendor Advisory
• https://t.me/cibsecurity/66688 · Telegram Post
• https://t.me/aptreports/19689 · Telegram Post
• https://twitter.com/ctiwatchcloud/status/2043876996086689952 · Twitter Post
• https://t.me/cvenotify/100735 · Telegram Post
• https://t.me/proxy_bar/1097 · Telegram Post
• https://t.me/aptreports/20053 · Telegram Post