CVE-2022-43555

Summary

A local privilege escalation vulnerability, CVE-2022-43555, has been identified in Ivanti Avalanche's Printer Device Service. This flaw allows an attacker with local access to gain elevated privileges on the affected system.

IFF Assessment

FOE

This vulnerability allows for privilege escalation, enabling attackers to gain greater control over compromised systems, which is detrimental to defenders.

Severity

7.8 High

Defender Context

Defenders should prioritize patching or mitigating Ivanti Avalanche systems to address this privilege escalation vulnerability. Unpatched systems pose a significant risk, potentially allowing attackers to move laterally within the network or gain deeper access for further malicious activities.

Read Full Story →