CyberSec.Space Logo
Back to CVE Browser

CVE-2022-31199

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-11-08
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.

Affected Platforms (CPE)

📦
Netwrix

Auditor

< 10.5

References & Advisories

🔗 https://bishopfox.com/blog/netwrix-auditor-advisory
🔗 https://bishopfox.com/blog/netwrix-auditor-advisory
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-31199

Related Vulnerabilities

CVE-2026-400096.5

Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate to full tre...

CVE-2026-63522.7

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 1...

CVE-2026-49344

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's...

CVE-2026-502016.5

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In St...