CVE-2022-31199 - CVE House
Back to Database
Status published Unknown CVE-2022-31199

Remote code execution vulnerabilities exist in the Netwrix Auditor User...

Vulnerability Description

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-31199

Credits & Attribution

No credits recorded in the NVD database.

References

More from netwrix

View All →
CVE-2020-15931
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to...
High 7.5
CVE-2019-14969
Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\...
High 7.8

Affected Vendor

Affected Software

auditor
Vulnerable Versions:
0

Timeline

Official Publish: November 8th, 2022
Last Modified: October 21st, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.