PT-2022-5708 · Symantec · Symantec Endpoint Protection

Published 2022-01-12 · Updated 2025-04-24 · CVE-2022-37017

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection (Windows) versions prior to 14.3 RU6/14.3 RU5 Patch 1

Description The issue is related to a Security Control Bypass, which can potentially allow a threat actor to circumvent existing security controls. This specifically applies to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.

Recommendations For versions prior to 14.3 RU6, update to 14.3 RU6 or later to resolve the issue. For versions prior to 14.3 RU5 Patch 1, apply Patch 1 or later to resolve the issue. As a temporary workaround, consider disabling the Client User Interface Password protection and Policy Import/Export Password protection until a patch is available.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2022-07105

CVE-2022-37017

Affected Products

Symantec Endpoint Protection

References · 8

• https://osv.dev/vulnerability/CVE-2022-37017 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21014 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07105 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-37017 · Security Note
• https://t.me/cibsecurity/53764 · Telegram Post
• https://t.me/cvenotify/119744 · Telegram Post
• https://vuldb.com/ru/?id.214640 · Note
• https://t.me/cvenotify/38880 · Telegram Post