PT-2023-14748 · Adguard · Adguard For Windows

Марсель Шагиев · Published 2023-01-26 · Updated 2025-03-31 · CVE-2022-45770

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adguard For Windows x86 versions through 7.11

Description The issue is related to improper input validation in the adgnetworkwfpdrv.sys component, which can lead to local privilege escalation.

Recommendations For Adguard For Windows x86 versions through 7.11, update to a version that addresses the improper input validation issue in the adgnetworkwfpdrv.sys component.

Exploit

Fix

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-45770

Affected Products

Adguard For Windows

References · 10

• 🔥 https://github.com/Marsel-marsel/CVE-2022-45770 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-45770 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45770 · Vendor Advisory
• https://adguard.com/en/versions/windows/release.html#version-71140780 · Vendor Advisory
• https://t.me/breachdetector/194635 · Telegram Post
• https://hackmag.com/security/aguard-cve · Note
• https://t.me/cvenotify/51002 · Telegram Post
• https://t.me/cvenotify/117066 · Telegram Post
• https://xakep.ru/2023/01/27/aguard-cve · Note
• https://t.me/cvenotify/50728 · Telegram Post