CVE-2022-25153 - CVE House
Back to Database
Status published High CVE-2022-25153

ITarian - Local privilege escalation in Endpoint Manager agent on Windows

Vulnerability Description

The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an insecure openssl.conf lookup.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-25153

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Wietse Boonstra (DIVD)
  • Hidde Smit (DIVD)
  • Frank Breedijk (DIVD)
  • Victor Pasman (DIVD)
  • Vicotr Gevers (DIVD)

References

More from ITarian

View All →
CVE-2022-25152
ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals
Critical 9.9
CVE-2022-25151
ITarian - Session cookie not protected by HttpOnly flag
High 7.5

Affected Vendor

Affected Software

Endpoint Manager Communication Client for Windows
Vulnerable Versions:
any version

Timeline

Official Publish: June 8th, 2022
Last Modified: March 11th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-275

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.