CVE-2022-2188: DXL Broker privilege escalation vulnerability

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-07 · updated 2026-06-17
Weakness: CWE-732

Description

Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.

Affected products

McAfee, LLC Data Exchange Layer (DXL) Broker: before 6.0.0.280 — fixed in 6.0.0.280

How to fix

Upgrade to a fixed version: McAfee, LLC Data Exchange Layer (DXL) Broker 6.0.0.280. Check the vendor advisory for mitigations.

References

https://kcm.trellix.com/corporate/index?page=content&id=SB10383
https://kcm.trellix.com/corporate/index?page=content&id=SB10383

Get alerted when CVE-2022-2188 or the next vulnerability affects your stack