CVE-2022-36670

MEDIUM 6.7CVE-2022-36670 · Published 06/09/2022 · updated 17/06/2026

In short

CVE-2022-36670 is a MEDIUM (CVSS 6.7) vulnerability affecting endpoint (pcprotect).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 24.7% of all vulnerabilities.
Fix: update to 5.17.470 or later.

Package	Affected versions	Patched versions
endpoint pcprotect	`< 5.17.470`	`5.17.470`

Description

PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.

References

mrvar0x.com/2022/07/21/pcprotect-endpoint-tampering-exploit · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free