Medium severity · published Sep 6, 2022
CVE-2022-37771
IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application…
6.7
CVSS
0.4%
EPSS
No
On KEV
Description
IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Malware Fighter · Iobit
9.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-37771
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-37771
Exploit
https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/
Exploit
https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-Tampering-Privilege-Escalation.html
More from Malware Fighter
7.8
CVE-2016-20059
IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation
7.8
CVE-2023-1646
A vulnerability was found in IObit Malware Fighter 9.4.0.776
7.8
CVE-2020-23864
An issue exits in IOBit Malware Fighter version 8.0.2.547
7.8
CVE-2018-19087
RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 bytes
7.8
CVE-2018-19086
RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 bytes