CVE-2022-30121

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

The “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
n/aIvanti Endpoint Manager11.0.1.951

References

Timeline

Published
Sep 23, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-301227.5A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.CVE-2022-3012310.0A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint aCVE-2022-301246.8An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a mCVE-2022-301265.5In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of serCVE-2022-301278.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-301288.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-301298.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2022-30139.8A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the filCVE-2022-301303.3.NET Framework Denial of Service VulnerabilityCVE-2022-301317.8Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityCVE-2022-301327.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2022-301339.8Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVE-2022-30121: Medium severity, CVSS 6.7 | Vulnix