CVE-2022-25153: Itarian Endpoint Manager Communication Client

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an insecure openssl.conf lookup.

Affected products

• Itarian Endpoint Manager Communication Client: before 7.0.42012.22030 (fixed in 7.0.42012.22030)

Published 2022-06-09. Last modified 2026-06-17.