[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIq5_Z_Fd52svG5wS6eTbCWbUwi2ZN0_TR3LDKZwpvXg":3,"g5a-risk:CVE-2022-3368":108},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":28,"epssTimeSeries":39,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":57,"weaknesses":58,"weaknessesCount":48,"isActivelyExploited":67,"cisaInfo":28,"otxData":28,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":103,"notableEvents":104},"CVE-2022-3368","What is CVE-2022-3368?","A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.","A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate ...","2022-10-17T21:15:10.513","2025-05-10T03:15:21.137",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security@nortonlifelock.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":26,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOCAL","LOW","REQUIRED","UNCHANGED","HIGH",7.3,null,1.3,5.9,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":37,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":35,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":36,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"NETWORK","NONE",2.8,0.01073,[40,40,40,38,38,38,38],0.00897,"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"avira","avira_security","*","cpe:2.3:a:avira:avira_security:*:*:*:*:*:windows:*:*",1,[50,55],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fsupport.norton.com\u002Fsp\u002Fstatic\u002Fexternal\u002Ftools\u002Fsecurity-advisories.html","Norton",[54],"Vendor Advisory",{"url":51,"source":52,"tags":56},[54],2,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2022-3368? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-3368, a high severity cyber security vulnerability from 2022. A vulnerability within the Software Updater functionality of...","CVE-2022-3368, CVE-2022-3368 vulnerability, CVE-2022-3368 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, avira security, avira_security vulnerability","\u002Fwhat-is\u002Fcve-2022-3368",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-3368","Cybersecurity","CVE-2022-3368, CVE-2022-3368 vulnerability, CVE-2022-3368 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":28,"Negate":28,"Nodes":96},[97],{"Operator":98,"Negate":28,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":101,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":102},"1A9176EF-59A0-4484-B979-ACE5B1F944B1","1.1.71.30554",[],[],{"lastModified":11,"cacheTime":106,"version":107},1792375371272,"2.0",{"score":109,"band":110,"action":111,"scoredAt":112},47,"Medium","Plan remediation","2026-10-16T06:55:59.108334+00:00"]