CVE-2022-0014: palo alto networks cortex xdr agent Untrusted Search Path
Vulnerability summary
CVE-2022-0014 is a high (CVSS 7.3) Untrusted Search Path vulnerability in palo alto networks cortex xdr agent. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.4% of scored vulnerabilities.
Timeline
- 12-01-2022PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can then be unintentionally executed by another local user when that user utilizes a Live Terminal session. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA6.7MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
0.00 pp
From 0.25% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Palo alto networks1 product
- cortex xdr agent≥ 7.2, < 7.2.4 | ≥ 7.3, < 7.3.2 | ≥ 5.0, < 5.0.12 | ≥ 6.1, < 6.1.9
Paloaltonetworks1 product
- cortex_xdr_agent≥ 5.0, < 5.0.12 | ≥ 6.1, < 6.1.9 | ≥ 7.2, < 7.2.4 | ≥ 7.3, < 7.3.2
2 vendors · 2 products