What’s Vulnerable › Vulnerabilities

CVE-2022-43997

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-01-26 · updated 2026-06-17
• Weakness: CWE-269

Description

Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESS_ALL_ACCESS rights.

Affected products

• Aternity: before 12.1.4.27 — fixed in 12.1.4.27

How to fix

Upgrade to a fixed version: Aternity 12.1.4.27. Check the vendor advisory for mitigations.

References

• https://gist.github.com/jackullrich/21fcfe75aeb5e18c60b80e684b83d741
• https://winternl.com/cve-2022-43997/
• https://gist.github.com/jackullrich/21fcfe75aeb5e18c60b80e684b83d741
• https://winternl.com/cve-2022-43997/

Get alerted when CVE-2022-43997 or the next vulnerability affects your stack