PT-2022-27284 · Crowdstrike · Crowdstrike Falcon

Published 2022-12-04 · Updated 2022-12-29 · CVE-2022-44721

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions CrowdStrike Falcon version 6.44.15806

Description The issue allows an administrative attacker to uninstall Falcon Sensor, bypassing the intended protection mechanism that requires possessing a one-time token. The sensor is managed at the kernel level.

Recommendations For CrowdStrike Falcon version 6.44.15806, as a temporary workaround, consider restricting administrative access to minimize the risk of exploitation until a patch is available.

Exploit

Related Identifiers

CVE-2022-44721

Affected Products

Crowdstrike Falcon

References · 6

• 🔥 https://github.com/gmh5225/CVE-2022-44721-CsFalconUninstaller · Exploit
• 🔥❌ https://github.com/purplededa/CVE-2022-44721-CsFalconUninstaller · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-44721 · Security Note
• https://t.me/cybersecuritytechnologies/7297 · Telegram Post
• https://t.me/cvenotify/39102 · Telegram Post
• https://t.me/cibsecurity/53955 · Telegram Post