CVE-2022-29799

CVE Database · CVE-2022-29799

CVE-2022-29799

· MEDIUMModified

CVSS v3.1

5.5

EPSS

11.76%

Published

Sep 21, 2022

Modified

May 27, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-22CWE-22

Affected Products (1)

microsoft · windows_defender_for_endpointvulnerable

References (2)

https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/

ExploitPatchTechnical Description

https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/

ExploitPatchTechnical Description

KEV Catalog EPSS Scores Vendors All CVEs