Approved changes feed: RSS · Atom

cpe:2.3:a:itarian:endpoint_manager_communication_client:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorItarian (0dd14b89-cefe-5b63-9099-1427d028cf32)
ProductEndpoint Manager Communication Client (00143a56-31f1-5953-96cc-4f2f17ac977c)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25153 vulnerable 2026-06-08 05:41:45.224451 ITarian - Local privilege escalation in Endpoint Manager agent on Windows
HIGH (7.8)
The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an insecure openssl.conf lookup.
Published: 2022-06-08T00:00:00.000Z
Updated: 2025-03-11T13:39:17.610Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.