CVE-2022-47529: Rsa Netwitness

Medium severity, CVSS 6.7. EPSS: 1.6% chance of exploitation in the next 30 days.

Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration: to either disable it completely or run user-supplied code or commands, thereby bypassing tamper-protection features via ACL modification.

Affected products

• Rsa Netwitness: before 12.2 (fixed in 12.2)

Published 2023-03-28. Last modified 2026-06-17.