CVE-2022-27609 - CVE House
Back to Database
Status published Medium CVE-2022-27609

Forcepoint One Endpoint prior to version 22.01 installed on Microsoft...

Vulnerability Description

Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges. This could result in a user disabling Forcepoint One Endpoint and the protection offered by it.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27609

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Forcepoint would like to thank mr.d0x - @mrd0x for discovering and working with us to responsibly disclose this vulnerability.

References

More from Forcepoint

View All →
CVE-2025-2274
Stored Cross Site Scripting in Forcepoint Web Security
Medium 4.8
CVE-2025-2272
Privilege Escalation and Arbitrary code execution in F1E Endpoint
High 7.3
CVE-2025-14026
Vulnerable Python version used in Forcepoint One DLP Client
Unknown 0
CVE-2025-12694
Local Privilege Escalation in VPN Client
High 8.5
CVE-2025-12690
Local Privilege Escalation in NGFW Engine
High 7.3

Affected Vendor

Affected Software

One Endpoint
Vulnerable Versions:
22.01

Timeline

Official Publish: April 4th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

CWE-863

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1548 Abuse Elevation Control Mechanism
Privilege Escalation
T1021 Remote Services
Lateral Movement
T1098 Account Manipulation
Defense Evasion